Jerry Moran actually said...
I would point out that while it may be an IT company that you are subcontracting or contracting with, a business contracts with lots of other businesses unrelated in a sense to IT, and there is an opportunity for the attack to occur there.
Context
Moran highlights cybersecurity risks in business contracts beyond IT companies.
02/03/2015