Effective Date of Rule: Thirty-one days after filing.
Purpose: Updating references and creating consistency between state and federal standards.
Citation of Existing Rules Affected by this Order: Amending WAC 434-180-360.
Statutory Authority for Adoption: RCW 19.34.030.
Adopted under notice filed as WSR 12-09-029 on April 10, 2012.
Number of Sections Adopted in Order to Comply with Federal Statute: New 0, Amended 0, Repealed 0; Federal Rules or Standards: New 0, Amended 0, Repealed 0; or Recently Enacted State Statutes: New 0, Amended 0, Repealed 0.
Number of Sections Adopted at Request of a Nongovernmental Entity: New 0, Amended 0, Repealed 0.
Number of Sections Adopted on the Agency's Own Initiative: New 0, Amended 1, Repealed 0.
Number of Sections Adopted in Order to Clarify, Streamline, or Reform Agency Procedures: New 0, Amended 0, Repealed 0.
Number of Sections Adopted Using Negotiated Rule Making: New 0, Amended 1, Repealed 0; Pilot Rule Making: New 0, Amended 0, Repealed 0; or Other Alternative Rule Making: New 0, Amended 0, Repealed 0.
Date Adopted: May 29, 2012.
Assistant Secretary of State
AMENDATORY SECTION(Amending WSR 99-02-047, filed 1/4/99, effective 2/4/99)
WAC 434-180-360 Trustworthy system. A system shall be regarded as trustworthy if it materially satisfies ((
Common Criteria (CC) Protection Profile (PP) for Commercial
Security 2 (CS2), (CCPPCS),)) current information security
standards and guidelines, including minimum requirements for
federal information systems, developed by the National
Institute of Standards and Technology (NIST). (( The
determination whether a departure from CCPPCS is material
shall be governed by WAC 434-180-240(2).)) For purposes of
this chapter, (( CCPPCS)) compliance shall be interpreted in a
manner that is reasonable in the context in which a system is
used and is consistent with other state and federal laws. (( Until such time as the referenced standard is adopted by
NIST, the standard applicable for purposes of this chapter
shall be the draft of CCPPCS dated July 13, 1998.))
[Statutory Authority: Chapter 19.34 RCW and 1998 c 33. 99-02-047, § 434-180-360, filed 1/4/99, effective 2/4/99. Statutory Authority: RCW 19.34.030, 19.34.040, 19.34.100, 19.34.111 and 19.34.400. 97-24-053, § 434-180-360, filed 11/26/97, effective 12/27/97.]