CCPA Update: Cybersecurity Requirements (Part 2)

This report explains California's updated CCPA cybersecurity audit requirements overseen by the CPPA, detailing which businesses are in scope, phased rollout and submission deadlines, required executive certifications, auditor qualifications and independence, audit scope and evidence requirements, and the 18 top-level cybersecurity controls businesses must implement proportional to their size and processing activities.