As said, to implement VoIP you need to look at all the issues of cost savings, bandwidth/quality of service requirements, management etc.
As far as the security issues, both the papers mentioned by pansophic appear to me to be scaremongering. All enterprise VoIP implementation run over...