Current through Register Vol. 24-16, August 15, 2024
Section 308-10A-403 - Independent third-party auditor qualificationsIndependent third-party auditors conducting data security audits must, at a minimum, hold one of the following qualifications:
(1) American Institute of Certified Public Accountants (AICPA);(2) Certified Information Security Auditor (CISA/ISACA);(3) ANSI-ASQ National Accreditation Board (ANAB); or(4) Other nationally recognized information technology auditing certification.(5) An internal audit organization that can attest it conforms with the international standards for the professional practice of internal auditing.Wash. Admin. Code § 308-10A-403
Adopted by WSR 23-19-010, Filed 9/7/2023, effective 10/8/2023