Dear Board of Health, This email is to notify you the Washington State Auditor’s Office (SAO) will be starting a Cybersecurity performance audit of the Spokane Regional Health District. This is a voluntary audit requested by the district to help identify ways to improve cybersecurity practices. An entrance conference will be held on April 13, 2025 to discuss the audit objectives, scope and methodology and the timing of the audit including reporting as outlined here: Cybersecurity Audits Summary. At the end of the audit, SAO will provide all results to Robert Hammett and hold an exit conference to discuss the results and any recommendations. If you would like to be invited to either or both meetings please let me or Robert know so we can make appropriate arrangements. Regardless, I will email you again at that time to let you know the audit has been completed. In addition, SAO will release a high-level public report that summarizes all the IT security local government audits completed next fiscal year in September 2027. This report will not name individual governments or provide any details about the district’s IT security audit results. Instead, this report will aggregate all local government Cybersecurity audits completed during the fiscal year, discuss identified trends and issues, and discuss the audits’ scope and methodologies. SAO will provide the district with a copy of this report when it’s issued. SAO and I are always available to discuss the audit in further detail at your convenience. If you have any questions, feel free to contact me or reach out directly to SAO's management team for this audit: IT Security Assistant Audit Manager – Quinn Peralta (Quinn.Peralta@sao.wa.gov) IT Security Audit Manager - Erin Laska (Erin.Laska@sao.wa.gov) Regards, Adam Columbia, CEH IT Auditor, Office of the Washington State Auditor (564) 201-2982 | Pronouns: he/him Let us help you improve your cyber health: #BeCyberSmart.