<cfquery name="get_organisation" datasource="#application.XYZ_DSN#" dbtype="odbc">
SELECT *
FROM Web_Organisation
WHERE OrganisationID = <cfqueryparam cfsqltype="cf_sql_integer" value="#attributes.OrganisationID#">
</cfquery>