California Raises The Bar On Cybersecurity (Podcast)

On this episode of “Decrypted,” hosts William Ridgway and David Simon are joined by Cybersecurity and Data Privacy colleague Lisa Zivkovic for a deep dive into California’s new mandatory risk assessment and cybersecurity audit requirements, including why the 2028 filing deadlines are more urgent than they appear and the two distinct compliance regimes companies must navigate. They also discuss the revenue and processing thresholds that trigger the cybersecurity audit obligation and the governance, privilege and sequencing considerations companies should build into their compliance programs. Tune in for actionable takeaways for general counsel, chief privacy officers and chief information security officers.