Effective Date of Rule: Thirty-one days after filing.

     Purpose: Updating references and creating consistency between state and federal standards.

     Citation of Existing Rules Affected by this Order: Amending WAC 434-180-360.

     Statutory Authority for Adoption: RCW 19.34.030.

      Adopted under notice filed as WSR 12-09-029 on April 10, 2012.

     Number of Sections Adopted in Order to Comply with Federal Statute: New 0, Amended 0, Repealed 0; Federal Rules or Standards: New 0, Amended 0, Repealed 0; or Recently Enacted State Statutes: New 0, Amended 0, Repealed 0.

     Number of Sections Adopted at Request of a Nongovernmental Entity: New 0, Amended 0, Repealed 0.

     Number of Sections Adopted on the Agency's Own Initiative: New 0, Amended 1, Repealed 0.

     Number of Sections Adopted in Order to Clarify, Streamline, or Reform Agency Procedures: New 0, Amended 0, Repealed 0.

     Number of Sections Adopted Using Negotiated Rule Making: New 0, Amended 1, Repealed 0;      Pilot Rule Making: New 0, Amended 0, Repealed 0; or Other Alternative Rule Making: New 0, Amended 0, Repealed 0.

     Date Adopted: May 29, 2012.

Steve Excell

Assistant Secretary of State

OTS-4721.1

AMENDATORY SECTION(Amending WSR 99-02-047, filed 1/4/99, effective 2/4/99)

WAC 434-180-360   Trustworthy system.   A system shall be regarded as trustworthy if it materially satisfies ((the Common Criteria (CC) Protection Profile (PP) for Commercial Security 2 (CS2), (CCPPCS),)) current information security standards and guidelines, including minimum requirements for federal information systems, developed by the National Institute of Standards and Technology (NIST). ((The determination whether a departure from CCPPCS is material shall be governed by WAC 434-180-240(2).)) For purposes of this chapter, ((CCPPCS)) compliance shall be interpreted in a manner that is reasonable in the context in which a system is used and is consistent with other state and federal laws. ((Until such time as the referenced standard is adopted by NIST, the standard applicable for purposes of this chapter shall be the draft of CCPPCS dated July 13, 1998.))

[Statutory Authority: Chapter 19.34 RCW and 1998 c 33. 99-02-047, § 434-180-360, filed 1/4/99, effective 2/4/99. Statutory Authority: RCW 19.34.030, 19.34.040, 19.34.100, 19.34.111 and 19.34.400. 97-24-053, § 434-180-360, filed 11/26/97, effective 12/27/97.]

© Washington State Code Reviser's Office