"CCPA Cyber Audit Regulations: Is Your Organization Ready?," Davis Wright Tremaine Webinar

Building on our prior overview of CalPrivacy's finalized regulations, this webinar in our CCPA Regulations Series focuses on cybersecurity audit requirements. Under those requirements, covered businesses must complete detailed, independent cybersecurity audit reports and provide compliance certifications to CalPrivacy. Initial audit reports are due in April 2028, 2029, or 2030 depending on the business's gross annual revenue. Audit reports must be completed yearly thereafter.

In this session, Michael T. Borgia (Partner, DWT) and Andrew Lewis (Counsel, DWT), and Andrew Belsick (Director, Cybersecurity & Data Privacy/Protection, BDO USA) discuss which businesses are subject to the audit requirements, the core elements of a cyber audit, and strategies for maintaining auditor independence, and key considerations for compliance certifications, among other topics. Using practical examples, they'll outline how organizations can prepare, leverage existing audits, and work with qualified independent auditors to meet upcoming certification deadlines. This session is the third in our series exploring key areas of the CalPrivacy regulations.

Whether you've joined our previous webinars or are beginning to assess these new requirements, you'll come away with clear, actionable steps to help your organization build a compliant, defensible cybersecurity audit program.

Speakers

• Andrew Belsick, Director, Cybersecurity & Data Privacy/Protection, BDO USA
• Michael Borgia, Partner, Davis Wright Tremaine
• Andrew Lewis, Counsel, Davis Wright Tremaine