Bill > SB871

This bill establishes a comprehensive cybersecurity framework for community water and sewerage systems in Maryland, requiring multiple state agencies to collaborate on protecting critical water infrastructure from cyber threats. The Department of the Environment will coordinate cybersecurity efforts with the Department of Information Technology and Maryland Department of Emergency Management, including updating regulations to include cybersecurity standards for water and wastewater treatment facilities. Community water and sewerage system providers must appoint a cybersecurity point of contact, attend annual cybersecurity training, adopt zero-trust cybersecurity approaches, and conduct biennial cybersecurity assessments. Systems serving over 3,300 customers must implement specific cybersecurity standards that meet or exceed federal guidelines. The bill mandates reporting of cyber incidents to the State Security Operations Center and requires the Department of Information Technology to develop guidance documents and allow water sector entities to join the Maryland Information Sharing and Analysis Center. Additionally, the bill calls for an education campaign to emphasize the economic benefits of cybersecurity prevention and requires collaboration with federal agencies like the EPA and Department of Defense to identify resources for local water systems. The legislation aims to enhance the resilience and security of Maryland's water infrastructure against potential cyber threats and will take effect on October 1, 2025.

Education, Transportation and Infrastructure

https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/SB0871?ys=2025RS