Pwc's Cfodirect Podcast

New cybersecurity audit requirements under the California Consumer Privacy Act (CCPA) establish a recurring, independent assessment of certain organizations’ cybersecurity programs, with the first audit period beginning January 1, 2027. We discuss which organizations may be subject to the requirements, key considerations on audit scope and independence, and how existing cybersecurity, risk, and assurance activities can support readiness.For more on California’s cybersecurity audit requirements, see our publication Privacy becomes a cybersecurity imperative under California’s audit rule.Follow this podcast on your favorite podcast app and subscribe to our weekly newsletter to stay informed.About our guestsMark Cornish is a partner at PwC who provides assurance and consulting services to global and regional clients within the financial services industry. He is recognized for his experience in complex third-party assurance reporting, internal controls, and risk and compliance matters. His areas of expertise incl