I'm going to link and quote heavily in this post. In part because the article on marketwire is very well done. And in part, because I hold Irwin and his opinions, and most of those from Burton Group, in pretty high regard. If you're even remotely considering approving Skype for enterprise use or embracing it as a corporate solution, you need to dig into these resources.

SALT LAKE CITY, UT -- (MARKET WIRE) -- 03/06/2006 -- Significant cost savings and improved communications are luring enterprise organizations to consider Skype. However, according to a report from in-depth IT research firm, Burton Group, Skype may violate some enterprise information management and security policies. Burton Group recommends enterprises assess the risks vs. rewards of Skype as the simplest solution for evaluating its use.

In the report "Debunking the Hype About Skype," senior analyst Irwin Lazar points out that enterprise use of Skype is growing. Those contacted by Burton Group cited significant reduction in long distance and mobile phone costs due to extremely low global long-distance rates, as well as Skype's ability to deliver unified communications service for both internal and external use (Skype integrates voice, video, IM, and presence capabilities) as primary business drivers to investigate Skype.

However, evaluating whether Skype fits into an organization's overall security and information protection policy is the biggest concern for enterprises. Burton Group found three areas that should be considered:

Management and Control -

- The lack of ability to provide centralized management and control
- The inability to log (and record) conversations with external entities

Security -

- Skype is a proprietary application that does not publish its protocols
  for public review
- Skype may offer a backdoor into enterprise networks
- Skype's security model does not support strong authentication
- Inability to guarantee voice and video performance

Regulatory compliance -

- The ability to provide accurate user location information to emergency
  services as mandated by the FCC
- The ability to support the Communications Assistance for Law Enforcement
  Act (CALEA) by providing an interface for wiretapping.

Lazar points out that it's as simple as weighing the risk versus the reward. "If the risk is too high -- ban Skype. If the reward outweighs the risk -- consider Skype as part of your overall communications strategy." Lazar also notes that the success of Skype has led to a slew of competing services, both from traditional IM providers (AOL, Yahoo! & MSN) as well as startups such as Tello and Gizmo. Lazar expects the market for integrated communications services to continue to rapidly grow.