Robert E. Davis > Quotes

“To competently perform rectifying security service, two critical incident response elements are necessary: information and organization.”
― Robert E. Davis

“Laws continue to be enacted, and the regulatory environment has become more complex due to unacceptable conduct remediation. Consequently, entities continue to be compelled to demonstrate compliance with legal mandates through documented assurance assessments.”
― Robert E. Davis, Assuring IT Legal Compliance

“Information technology (IT) assets must be protected from external and internal activities detrimental to effective and efficient functionality.”
― Robert E. Davis, Ensuring Information Assets Protection

“As for relegated/delegated responsibility to ensure organizational software licensing compliance, management is still accountable when intellectual property rights are violated. If the safeguarding responsibility is assigned to an ineffective and/or inefficient unit within an organization, IT audit should recommend an alternative arrangement after the risks are substantiated.”
― Robert E. Davis

“Since knowledge and ideas are an important part of cultural heritage, social interaction and business transactions, they retain a special value for many societies. Logically, if the associated electronically formatted information is valued, preventive and detective measures are necessary to ensure minimum organizational impact from an IPR security breach.”
― Robert E. Davis, IT Auditing: Assuring Information Assets Protection

“Considering what is at stake politically, economically and technically for most organizations; usually justifying IT governance deployment based on one viewpoint narrows suitability and expected benefits.”
― Robert E. Davis

“Potential stakeholders usually rely upon governance elements prior to investing their time, talent, and/or money.”
― Robert E. Davis, IT Auditing: Assuring Information Assets Protection

“The information possessed by an organization is among its most valuable assets and is critical to its success. The Board of Directors, which is ultimately accountable for the organization’s success, is therefore responsible for the protection of its information. The protection of this information can be achieved only through effective management and assured only through effective board oversight.”
― Robert E. Davis

“After years of serving as an IT auditor and consultant, I have extrapolated that many of the largest organizational formations needed effective leadership in generating consumer confidence regarding information systems management.”
― Robert E. Davis