Explore our insights: Boosting efficiency in Australian General Practice with AI-powered communication >
Cloud Telephony

Unapproved & unmonitored communications are escalating

An NDIS worker using a personal mobile phone

Last week, two events aligned to compel me to write this. First, I attended a breakfast event and listened to a Microsoft representative evangelise about the AI-enabled future of their platform.  Then, I had a conversation with a national healthcare provider that brought the cost of familiarity into sharp focus. 

It’s natural for organisations to be influenced by what they know, especially regarding technology. For example, decision-makers in organisations whose operations are heavily run on Microsoft often favour Microsoft-based solutions simply because they’re already part of the Microsoft 365 ecosystem. Internal IT is usually trained and “familiar” with the environment, licences like E5 are already in place, which may make it seem like a safe, cost-efficient, low-friction decision.

But that comfort can mask significant opportunity costs?

Have you experienced or have any thoughts on this?

A familiar path—until it wasn’t

With over 100 clinics nationwide, this organisation was on the verge of locking in Microsoft’s telephony solution. Their rationale? It was “easier” for their IT department; they could leverage their E5 licences, and with native integration with their Microsoft environment, it seemed a given. They were just weeks away from presenting this recommendation to their executive team.

By the end of the meeting, however, the conversation had shifted dramatically.

We walked through a third-party telephony alternative that offered:

  1. Lower cost—nearly half the price they were expecting to pay.
  2. Higher service levels and compliance (PCI DSS),
  3. Better functionality and analytics directly addressed their need for clinical performance insights.
  4. Ease of administration, no IT dependency to make changes or manage users, which means operations have greater control over the employee/customer experience
  5. Fully support Microsoft integration—including Teams interoperability and single sign-on.

What had started as a confident, “we’ve got this covered” stance became a strategic reassessment. Familiarity had nearly led them down a more expensive, higher-maintenance path.

What’s often missing in familiar tech choices

IT departments and operators should first ask: Is this something we should own or just enable? When IT recognises that operations best manage a particular service, it opens the door to more collaborative decisions, empowering frontline teams while reducing unnecessary IT dependencies that are not necessarily core to their department.

This scenario isn’t unique. Familiarity can narrow the scope. When IT and operations co-lead evaluations, they uncover options that better align with business goals, not just existing infrastructure.

Operations can define frontline needs while IT ensures alignment and security. Together, they shift the focus from convenience to impact, leading to more informed, value-based decisions.

When IT and operations partner early, they’re more likely to:

  • Explore a broader range of solutions instead of defaulting to incumbent platforms.
  • Evaluate cost and functionality side-by-side, not in isolation.
  • Identify reporting and compliance gaps before a solution is deployed.
  • Empower business units with platforms that offer self-service capabilities and adaptability.

Taking this approach turns the procurement process into a strategic opportunity, not just a technical project. And it ensures that final recommendations are grounded in value, not just familiarity.

Reframe the question: fit or familiar?

This isn’t about replacing Microsoft or your incumbent platform. It’s about ensuring your decision strategy aligns with your service strategy. Just because the same vendor makes a tool/app doesn’t mean it’s the best fit for how you operate, or what your teams and clients need.

So here’s the real question:
Is your technology stack optimised for capability and future-readiness, or just built around what your IT team already knows?

Before you commit, take a moment to challenge the default. You may find better outcomes—and better value—just outside your comfort zone.

More insights​

In a period marked by swift progress in the adoption of unified communication and collaboration tools and a changing regulatory environment, the significance of digital communications governance cannot be emphasised enough.

A pioneering survey conducted independently for Theta Lake, a prominent figure in Digital Communications Governance (DCG), found that there were critical gaps in governance and compliance for employee communications and that three-quarters (74%) of respondents reported that it is likely that their employees are using unmonitored communications channels, up from 66% in 2022 (US).

The risks

In Australia, industries such as NDIS and healthcare will be faced with risk as two trends converge:

  • The increase in regulation around compliance and privacy
  • The increasing availability of communication technology that directly addresses these risks diminishes any reasons to bear these risks.

Organisations expose themselves to high risk without automated, effective call log capture, record keeping, and communication monitoring.

These risks may include:

  • Data security: Personal mobile devices may have a different level of security than devices provided by the employer or if the calls are made using a UCaaS platform such as RingCentral. UCaaS platforms can reduce unauthorised access to sensitive information.
  • Breach of confidentiality: Without controls, there is a risk that confidential information could be overheard by third parties or stored in insecure locations like personal call logs, voicemails, or note-taking apps.
  • Record-keeping like call logs: Proper documentation of engagements with participants in the NDIS industry, for example, is crucial for service accountability and continuity of care. Using personal phone numbers can complicate the process of recording and storing these interactions in a compliant manner.
  • Compliance with policies and procedures: Personal devices might need to comply with the NDIS provider’s policies and procedures for handling participant information e.g. for phone-based engagements where invoicing is required, the records must be stored according to policies and regulations in that industry.
  • Inconsistent communication: If an employee uses a personal phone, it may not be apparent when they are acting in a professional capacity versus a personal one.
  • Difficulty monitoring compliance: It can be more difficult for an NDIS provider to monitor and ensure compliance with privacy laws and guidelines when employees use personal phones.
  • Reputational risk: Any breach of privacy or confidentiality could damage the reputation of the NDIS provider and undermine the trust of participants and the public.
  • Legal and financial consequences: Non-compliance with privacy laws can lead to legal action, fines, and compensation claims.

Addressing the risks with UCaaS

Today’s technological advances in UCaaS address many of these risks and provide additional advantages in a range of areas:

  • Improved privacy and security: UCaaS platforms often have robust security measures, such as end-to-end encryption and secure data storage, which help protect sensitive participant information and ensure compliance with Australian privacy laws.
  • Separation of work calls from personal: Using a dedicated work number for all business communications maintains clear boundaries between employees’ work and personal lives.
  • Consistency and availability: UCaaS systems allow employees to use the same number across multiple devices, improving availability and ensuring a consistent point of contact for NDIS participants.
  • Advanced features: Features such as call forwarding, voicemail-to-email transcription, and call recording (with participant consent) can enhance communication efficiency, record-keeping, and the NDIS participant and employee experience.
  • Centralised control: The NDIS provider can centrally manage and monitor communications, which aids in quality control, training, and ensuring communication policies are followed.
  • Scalability: As the NDIS provider grows, a UCaaS platform can quickly scale to accommodate more users and increase call volume without infrastructure changes.
  • Audit and compliance: UCaaS platforms can provide detailed call logs and recording capabilities for audit and compliance with NDIS regulations.
  • Enhanced integration: Many UCaaS solutions can be deeply embedded into current systems like CRMs to minimise data capture and monitoring disruption.
  • Business continuity: UCaaS platforms like RingCentral have features that ensure business continuity, such as rerouting calls to alternate devices in an outage or emergency.
  • Cost management: Consolidating communications into a single platform can help control costs by reducing the need for multiple providers or infrastructure.
  • Data insights: UCaaS platforms allow you to gather valuable analytics and insights into communication patterns, helping to optimise staff performance and participant engagement. AI can assist in monitoring this activity or automating the presentation of the insights.

By leveraging a UCaaS solution like RingCentral, NDIS and healthcare providers can maintain a high standard of service delivery while ensuring that communications are secure, professional, and compliant with Australian regulations.