EXTREMELY COMMON KNOWLEDGE / GENERAL STATEMENTS: DON'T CITE
"A properly managed information assurance (IA) program is crucial to the protection of the integrity, accuracy and reliability of the information flow of any corporation."
- Cite only if this is a direct quote from someone else's work.
KNOWLEDGE THAT IS COMMON TO THE DISCIPLINE (in the case above, information assurance or IA): DEPENDS ON CIRCUMSTANCE
"Organizations that establish standards for appropriate information assurance practice include ISO, NIST, and the Committee on National Security Systems."
- No need to cite if you're writing for someone already familiar with information assurance (say, your instructors, or a journal that publishes articles about IA
- You may have to cite if your writing is for readers who may not be familiar with IA (for example, an article to be published in a general interest journal)
- Always cite if the material is a direct quote from someone else's work!
- If you're not sure: Ask your instructor!
KNOWLEDGE THAT IS NOT COMMON AND MUST BE CITED:
"On trend from last year, three sectors exhibit steady growth, in particular information security management (ISO/IEC 27001) and food management (ISO 22001), respectively boasting a health 14% and 15% increase in certification, while the medical devices sector (ISO 13485) similarly shows a 15% increment."
International Organization for Standardization (2013). ISO Survey 2013, Executive Summary. Retrieved from http://www.iso.org
/2013/iso_survey_executive-summary.pdf?v2013.
- The contents of the 2013 ISO Survey are not common knowledge, so they must be cited
- The above information includes numerical data; assuming you didn't invent those numbers yourself, you got them from somewhere, so you have to cite where you got them