SPOTLIGHT: Survey: U.S. firms lax about VoIP security