California Code of Regulations › Title 11 - Law › Division 1 - Attorney General › Chapter 18 - Electronic Recording Delivery System › Article 7 - Computer Security Auditor › Section 999.195 - Renewal of Approval

Current through Register 2024 Notice Reg. No. 28, July 12, 2024
(a) The
				  certificate of approval issued by the ERDS program to a Computer Security Auditor
				  shall be renewed prior to expiration in order to remain valid. The applicant for
				  renewal shall submit to the ERDS Program all of the following:
(1) An Application for Computer Security Auditor
				  Approval form #ERDS 0002 indicating renewal, which shall be dated and signed with a
				  declaration under penalty of perjury under the laws of the State of California that
				  all information contained therein, and all information submitted with the
				  application, is true, correct, and complete; an acknowledgment that providing any
				  false or dishonest information in connection with the application may be grounds for
				  denial or subsequent termination or suspension of approval; and an attestation that
				  the applicant is not an Authorized Submitter, Agent of an Authorized Submitter, or
				  Certified Vendor of ERDS Software as defined in this chapter.
(2) At least one of the following to demonstrate
				  that the applicant has met the significant experience criteria required for renewal
				  of approval as a Computer Security Auditor:
(A) A
				  copy of the applicant's Certified Internal Auditor certification in good standing
				  from the Institute of Internal Auditors attached to the Application for Computer
				  Security Auditor Approval form #ERDS 0002, and a completed Reference(s) for ERDS
				  Computer Security Auditor form #ERDS 0004 (May 2011) listing reference contacts for
				  whom the applicant has worked within the last five (5)-year period who can verify
				  the applicant has at least two (2) years of experience in the evaluation and
				  analysis of Internet security design and in conducting security testing procedures,
				  and specific experience performing Internet penetration studies.
(B) A copy of the applicant's Certified
				  Information Systems Auditor certification in good standing from the Information
				  Systems Audit and Control Association attached to the Application for Computer
				  Security Auditor Approval form #ERDS 0002, and a completed Reference(s) for ERDS
				  Computer Security Auditor form #ERDS 0004 (May 2011) listing reference contacts for
				  whom the applicant has worked within the last five (5)-year period who can verify
				  the applicant has at least two (2) years of experience in the evaluation and
				  analysis of Internet security design and in conducting security testing procedures,
				  and specific experience performing Internet penetration studies.
(C) A copy of the applicant's Certified Fraud
				  Examiner certification in good standing from the Association of Certified Fraud
				  Examiners attached to the Application for Computer Security Auditor Approval form
				  #ERDS 0002 and a completed Reference(s) for ERDS Computer Security Auditor form
				  #ERDS 0004 (May 2011) listing reference contacts for whom the applicant has worked
				  within the last five (5)-year period who can verify the applicant has at least two
				  (2) years of experience in the evaluation and analysis of Internet security design
				  and in conducting security testing procedures, and specific experience performing
				  Internet penetration studies.
(D) A copy
				  of the applicant's Certified Information Systems Security Professional certification
				  in good standing from the International Information Systems Security Certification
				  Consortium attached to the Application for Computer Security Auditor Approval form
				  #ERDS 0002 and a completed Reference(s) for ERDS Computer Security Auditor form
				  #ERDS 0004 (May 2011) listing reference contacts for whom the applicant has worked
				  within the last five (5)-year period who can verify the applican has at least two
				  (2) years of experience in the evaluation and analysis of Internet security design
				  and in conducting security testing procedures, and specific experience performing
				  Internet penetration studies.
(E) A copy
				  of the applicant's Global Information Assurance Certification in good standing from
				  the SysAdmin, Audit, Network, Security Institute attached to the Application for
				  Computer Security Auditor Approval form #ERDS 0002 and a completed Reference(s) for
				  ERDS Computer Security Auditor form #ERDS 0004 (May 2011) listing reference contacts
				  for whom the applicant has worked within the last five (5)-year period who can
				  verify the applicant has at least two (2) years of experience in the evaluation and
				  analysis of Internet security design and in conducting security testing procedures,
				  and specific experience performing Internet penetration
				  studies.