Bill > HB1062

This bill establishes comprehensive cybersecurity requirements and planning efforts for community water and sewerage systems in Maryland. The legislation requires the Department of the Environment to coordinate cybersecurity efforts with the Department of Information Technology and the Maryland Department of Emergency Management, focusing on protecting water and wastewater infrastructure from cyber threats. Key provisions include mandating that water system providers appoint a cybersecurity point of contact, attend annual cybersecurity training, adopt cybersecurity standards that meet or exceed federal guidelines, and commit to a zero-trust cybersecurity approach. Systems serving over 3,300 customers must conduct cybersecurity assessments every two years and report cyber incidents to the State Security Operations Center. The bill also requires the development of cybersecurity training programs, establishes minimum cybersecurity standards, and mandates that the Department of the Environment conduct an educational campaign to raise awareness about cybersecurity in the water and wastewater sector. Additionally, the legislation intends to help water systems access federal resources, work with federal agencies like the EPA and Department of Defense, and prioritize cybersecurity preparedness through tabletop exercises and comprehensive planning. The bill is set to take effect on October 1, 2025, and aims to significantly enhance the cybersecurity resilience of Maryland's water infrastructure.

Transportation and Infrastructure

https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/HB1062?ys=2025RS