The 2020 California Consumer Privacy Act (CCPA) Definitive Guide: An Applied Solution using NIST 800-171

WELCOME TO THE RELEASE OF THE 2020 RELEASE OF THE CCPA DEFINITIVE GUIDEThe author has over 25 years in program management, intelligence operations, and cybersecurity and is the #1 expert on NIST 800-171 application. In this edition we have included information and changes affecting businesses attempting to meet the current CCPA deadlines. The author has included an additional chapter on current 2019-2020 amendments, and provides a plain-English interpretation for the reader. Understanding what the CCPA is and how to effectively apply the NIST 800-171 Security Framework is the approach of this how-to guide. The 2020 California Consumer Privacy Act (CCPA) Guide designed to provide clear direction and understanding of how to implement the CCPA either in a business, agency or organization. The CCPA provides provisions specific to California residents and the companies regarding the 2018 compulsory law to protect personal information statewide. While NIST 800-series cybersecurity publications tell a business "what" is required, they do not necessarily help in telling "how" to meet the 110 security control requirements in NIST 800-171. This book is also written to explain what the National Institute of Standards and Technology (NIST) 800-171 security controls require and how to meet them effectively for the purposes of CCPA compliance. And, will walk you and your IT staff through the security controls in enough detail to ensure a complete and "good faith" security effort has occurred.Mr. Russo is the former Chief Information Security Officer (CISO) for the Department of Education where he and his team were responsible for closing over 95% of the outstanding security findings identified by the House Oversight Committee in 2016 . He was also a Senior Information Security Engineer with the Department of Defense's (DOD) F-35 Joint Strike Fighter program. He has an extensive background in cybersecurity and is an expert in the Risk Management Framework (RMF) and DOD Instruction 8510 which implements RMF throughout the DOD and the federal government. He holds both a Certified Information Systems Security Professional (CISSP) certification and a CISSP in information security architecture (ISSAP). He holds a 2017 certification as a Chief Information Security Officer (CISO) from the National Defense University, Washington, DC. He retired from the US Army Reserves in 2012 as the Senior Intelligence Officer.He speaks regularly within the federal government and Intelligence Community on advanced topics regarding the evolution of cybersecurity in the 21st Century.