CISA Certified Information Systems Auditor All-in-One Exam Guide, Third Edition Quotes

“Organizations may also be required to comply with specific standards. For example, organizations that process, store, or transmit credit card numbers may be required to comply with the Payment Card Industry Data Security Standard (PCI-DSS), even though there may be no laws requiring organizations to do so.”
― Peter H. Gregory, CISA Certified Information Systems Auditor All-in-One Exam Guide, Third Edition

“The only means of exchange between an outsourcing provider and its customer organization are money and reputation.”
― Peter H. Gregory, CISA Certified Information Systems Auditor All-in-One Exam Guide, 2nd Edition