“Without a compliance framework, some organizations might not implement any security practices at all (or at least until it is too late). Organizations must constantly challenge themselves to not only remain in full compliance, but also seek ways to go above and beyond to ensure the highest levels of security.”

- P. Koziars, Design