...administrators to ensure that the implementation of new devices follows good hardening practices that includes changing the defaultpassword. You can read the full interview with Robert Moore here. I also recommend the Voice over IP Security Alliance...
http://www.computerweekly.com/blogs/stuart_king/2007/12/voip-security.html