reglab/statecodes huggingface dataset:
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 2 - Organization and General Authority of the Department › Section 3.5-202 - Secretary of Information Technology

(a)    The head of the Department is the Secretary of Information Technology, who shall be appointed by the Governor with the advice and consent of the Senate.
(b)    The Secretary shall have experience in information technology, data processing, telecommunications, and systems procurement, planning, and management.
(c)    Before taking office, the appointee shall take the oath required by Article I, § 9 of the Maryland Constitution.
(d)    The Secretary shall advise the Governor on all matters assigned to the Department and is responsible for carrying out the Governor’s policies on those matters.
(e)    The Secretary is responsible for the operation of the Department and may establish guidelines and procedures to promote the orderly and efficient administration of the Department.
(f)    The Secretary may establish, reorganize, or abolish areas of responsibility in the Department necessary to fulfill the duties assigned to the Secretary.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 2 - Organization and General Authority of the Department › Section 3.5-203 - Appointment Powers

(a)    (1)    With the approval of the Governor, the Secretary shall appoint a Deputy Secretary.
(2)    The Deputy Secretary:
(i)    serves at the pleasure of the Secretary;
(ii)    is entitled to the salary provided in the State budget; and
(iii)    has the duties provided by law or delegated by the Secretary.
(b)    Each assistant secretary and professional consultant is in the executive service, management service, or is a special appointment in the State personnel management system and is appointed by and serves at the pleasure of the Secretary.
(c)    Except as provided in this section or otherwise by law, the Secretary shall appoint and remove all other staff in accordance with the provisions of the State Personnel and Pensions Article.
(d)    The appointment of or removal of staff of any unit in the Department is subject to the approval of the Secretary.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 2 - Organization and General Authority of the Department › Section 3.5-204 - Attorney General Is Legal Adviser to Department

(a)    The Attorney General is legal adviser to the Department.
(b)    At the request of the Governor, the Attorney General shall assign to the Department the number of assistant Attorneys General authorized by law to be assigned to the Department.
(c)    (1)    The Attorney General shall designate one of the assistant Attorneys General assigned to the Department as counsel to the Department.
(2)    After the Attorney General designates the counsel to the Department, the Attorney General may not reassign the counsel without consulting the Secretary.
(3)    (i)    The counsel may have no other duty other than to:
1.    give the legal aid, advice, and counsel required by the Secretary or any other official of the Department;
2.    supervise the other assistant Attorneys General assigned to the Department; and
3.    perform for the Department the duties that the Attorney General assigns.
(ii)    The counsel shall perform these duties subject to the control and supervision of the Attorney General.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 2A - Office of Security Management › Section 3.5-2A-01 - Definitions

(a)    In this subtitle the following words have the meanings indicated.
(b)    “Council” means the Maryland Cybersecurity Coordinating Council.
(c)    “Office” means the Office of Security Management.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 2A - Office of Security Management › Section 3.5-2A-03 - Head of Office -- Chief Information Security Officer -- Qualifications -- Director of Local Cybersecurity -- Staffing

(a)    The head of the Office is the State Chief Information Security Officer.
(b)    The State Chief Information Security Officer shall:
(1)    be appointed by the Governor with the advice and consent of the Senate;
(2)    serve at the pleasure of the Governor;
(3)    be supervised by the Secretary; and
(4)    serve as the chief information security officer of the Department.
(c)    An individual appointed as the State Chief Information Security Officer under subsection (b) of this section shall:
(1)    at a minimum, hold a bachelor’s degree;
(2)    hold appropriate information technology or cybersecurity certifications;
(3)    have experience:
(i)    identifying, implementing, or assessing security controls;
(ii)    in infrastructure, systems engineering, or cybersecurity;
(iii)    managing highly technical security, security operations centers, and incident response teams in a complex cloud environment and supporting multiple sites; and
(iv)    working with common information security management frameworks;
(4)    have extensive knowledge of information technology and cybersecurity field concepts, best practices, and procedures, with an understanding of existing enterprise capabilities and limitations to ensure the secure integration and operation of security networks and systems; and
(5)    have knowledge of current security regulations.
(d)    The State Chief Information Security Officer shall provide cybersecurity advice and recommendations to the Governor on request.
(e)    (1)    (i)    There is a Director of Local Cybersecurity, who shall be appointed by the State Chief Information Security Officer.
(ii)    The Director of Local Cybersecurity shall work in coordination with the Maryland Department of Emergency Management to provide technical assistance, coordinate resources, and improve cybersecurity preparedness for units of local government.
(2)    (i)    There is a Director of State Cybersecurity, who shall be appointed by the State Chief Information Security Officer.
(ii)    The Director of State Cybersecurity is responsible for implementation of this section with respect to units of State government.
(f)    The Department shall provide the Office with sufficient staff to perform the functions of this subtitle.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 2A - Office of Security Management › Section 3.5-2A-05 - Maryland Cybersecurity Coordinating Council -- Members -- Chair -- Meetings -- Duties

(a)    There is a Maryland Cybersecurity Coordinating Council.
(b)    (1)    The Council consists of the following members:
(i)    the secretary of each of the principal departments listed in § 8–201 of the State Government Article, or a secretary’s designee;
(ii)    the State Chief Information Security Officer;
(iii)    the Adjutant General of the Maryland National Guard, or the Adjutant General’s designee;
(iv)    the Superintendent of State Police, or the Superintendent’s designee;
(v)    the Director of the Governor’s Office of Homeland Security, or the Director’s designee;
(vi)    the Executive Director of the Department of Legislative Services, or the Executive Director’s designee;
(vii)    one representative of the Administrative Office of the Courts;
(viii)    the Chancellor of the University System of Maryland, or the Chancellor’s designee; and
(ix)    any other stakeholder that the State Chief Information Security Officer deems appropriate.
(2)    If a designee serves on the Council in place of an official listed in paragraph (1) of this subsection, the designee shall report information from the Council meetings and other communications to the official.
(c)    In addition to the members listed under subsection (b) of this section, the following representatives may serve as nonvoting members of the Council:
(1)    one member of the Senate of Maryland, appointed by the President of the Senate;
(2)    one member of the House of Delegates, appointed by the Speaker of the House; and
(3)    one representative of the judiciary, appointed by the Chief Judge of the Court of Appeals.
(d)    The chair of the Council is the State Chief Information Security Officer.
(e)    The Council shall meet at least quarterly at the request of the chair.
(f)    The Council shall:
(1)    provide advice and recommendations to the State Chief Information Security Officer regarding:
(i)    the strategy and implementation of cybersecurity initiatives and recommendations; and
(ii)    building and sustaining the capability of the State to identify and mitigate cybersecurity risk and respond to and recover from cybersecurity–related incidents.
(2)    use the analysis compiled by the Office under § 3.5–2A–04(e)(1)(ii) of this subtitle to prioritize cybersecurity risk across the Executive Branch of State government and make corresponding recommendations for security investments in the Governor’s annual budget.
(g)    In carrying out the duties of the Council, the Council  shall consult with outside experts, including experts in the private sector, government agencies, and institutions of higher education.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 2A - Office of Security Management › Section 3.5-2A-06 - Promotion of Cybersecurity Education and Training Opportunities

The Council shall:
(1)    promote cybersecurity education and training opportunities to strengthen the State’s cybersecurity capabilities by expanding existing agreements with educational institutions; and
(2)    utilize relationships with institutions of higher education to advertise cybersecurity careers and job positions available in State or local government, including the Maryland Technology Internship Program established under Title 18, Subtitle 30 of the Education Article.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 3 - Information Processing and Security › Section 3.5-302 - Scope

(a)    This subtitle does not apply to changes relating to or the purchase, lease, or rental of information technology by:
(1)    public institutions of higher education solely for academic or research purposes;
(2)    the Maryland Port Administration;
(3)    the University System of Maryland;
(4)    St. Mary’s College of Maryland;
(5)    Morgan State University;
(6)    the Maryland Stadium Authority;
(7)    Baltimore City Community College;
(8)    the Legislative Branch of State government;
(9)    the Judicial Branch of State government;
(10)    the Office of the Attorney General;
(11)    the Comptroller; or
(12)    the State Treasurer.
(b)    Except as provided in subsection (a) of this section, this subtitle applies to any project of a unit of the Executive Branch of State government that involves an agreement with a public institution of higher education for a portion of the development of the project, whether the work on the development is done directly or indirectly by the public institution of higher education.
(c)    Notwithstanding any other provision of law, except as provided in subsection (a) of this section and §§ 3.5–307(a)(2), 3.5–308, and 3.5–309 of this subtitle, this subtitle applies to all units of the Executive Branch of State government including public institutions of higher education other than Morgan State University, the University System of Maryland, St. Mary’s College of Maryland, and Baltimore City Community College.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 3 - Information Processing and Security › Section 3.5-305 - Development of Policies, Standards, and Plans by Units of State Government

(a)    Except as provided in subsection (b) of this section, in accordance with guidelines established by the Secretary, each unit of State government shall develop and submit to the Secretary:
(1)    information technology policies and standards;
(2)    an information technology plan; and
(3)    an annual project plan outlining the status of efforts to make information and services available to the public over the Internet.
(b)    (1)    The governing boards of the public institutions of higher education shall develop and submit information technology policies and standards and an information technology plan for their respective institutions or systems to the Secretary.
(2)    If the Secretary finds that the submissions required under this subsection are consistent with the master plan, the Secretary shall incorporate those submissions into the master plan.
(3)    If the Secretary finds that the submissions required under this subsection are not consistent with the master plan:
(i)    the Secretary shall return the submissions to the governing boards; and
(ii)    the governing boards shall revise the submissions as appropriate and submit the revised policies, standards, and plans to the Secretary.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 3 - Information Processing and Security › Section 3.5-307 - Consistency With Master Plan -- Review of Projects and Proposals

(a)    (1)    A unit of State government may not purchase, lease, or rent information technology unless consistent with the master plan.
(2)    A unit of State government other than a public institution of higher education may not make expenditures for major information technology development projects or cybersecurity projects except as provided in § 3.5–308 of this subtitle.
(b)    The Secretary may review any information technology project or cybersecurity project for consistency with the master plan.
(c)    (1)    A unit of State government shall advise the Secretary of any information technology proposal involving:
(i)    resource sharing;
(ii)    the exchange of goods or services;
(iii)    a gift, contribution, or grant of real or personal property; or
(iv)    the sale, lease, exchange, or other disposition of communications facilities or communications frequencies.
(2)    The Secretary shall determine if the value of the resources, services, property, or other consideration to be obtained by the State under the terms of any proposal submitted in accordance with paragraph (1) of this subsection equals or exceeds $100,000.
(3)    If the value of any proposal submitted in accordance with this subsection equals or exceeds $100,000 and the Secretary and unit agree to proceed with the proposal, information on the proposal shall be:
(i)    advertised for a period of at least 30 days in the eMaryland Marketplace; and
(ii)    submitted, simultaneously with the advertisement, to the Legislative Policy Committee for a 60–day review and comment period, during which time the Committee may recommend that the proposal be treated as a procurement contract under Division II of this article.
(4)    Following the period for review and comment by the Legislative Policy Committee under paragraph (3) of this subsection, the proposal is subject to approval by the Board of Public Works.
(5)    This subsection may not be construed as authorizing an exception from the requirements of Division II of this article for any contract that otherwise would be subject to the State procurement process.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 3 - Information Processing and Security › Section 3.5-308 - Information Technology Project Requests

(a)    This section does not apply to a public institution of higher education.
(b)    In submitting its information technology project requests, a unit of State government shall designate projects which are major information technology development projects.
(c)    In reviewing information technology project requests, the Secretary may change a unit’s designation of a major information technology development project.
(d)    The Secretary shall review and, with the advice of the Secretary of Budget and Management, approve major information technology development projects and specifications for consistency with all statewide plans, policies, and standards, including a systems development life cycle plan.
(e)    The Secretary shall be responsible for overseeing the implementation of major information technology development projects, regardless of fund source.
(f)    With the advice of the Secretary of Budget and Management, expenditures for major information technology development projects shall be subject to the approval of the Secretary who shall approve expenditures only when those projects are consistent with statewide plans, policies, and standards.
(g)    (1)    The Secretary shall approve funding for major information technology development projects only when those projects are supported by an approved systems development life cycle plan.
(2)    An approved systems development life cycle plan shall include submission of:
(i)    a project planning request that details initial planning for the project, including:
1.    the project title, appropriation code, and summary;
2.    a description of:
A.    the needs addressed by the project;
B.    the potential risks associated with the project;
C.    possible alternatives; and
D.    the scope and complexity of the project; and
3.    an estimate of:
A.    the total costs required to complete through planning; and
B.    the fund sources available to support planning costs; and
(ii)    a project implementation request to begin full design, development, and implementation of the project after the completion of planning, including:
1.    the project title, appropriation code, and summary;
2.    a description of:
A.    the needs addressed by the project;
B.    the potential risks associated with the project;
C.    possible alternatives;
D.    the scope and complexity of the project; and
E.    how the project meets the goals of the statewide master plan; and
3.    an estimate of:
A.    the total project cost; and
B.    the fund sources available.
(3)    The Secretary may approve funding incrementally, consistent with the systems development life cycle plan.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 3 - Information Processing and Security › Section 3.5-310 - Construction of Subtitle

This subtitle may not be construed to give the Secretary authority over:
(1)    the content of educational applications or curriculum at the State or local level; or
(2)    the entities that may participate in such educational programs.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 3 - Information Processing and Security › Section 3.5-313 - Maryland Funding Accountability and Transparency Act of 2008

(a)    (1)    In this section the following words have the meanings indicated.
(2)    “Agency” includes a unit of State government that receives funds that are not appropriated in the annual budget bill.
(3)    (i)    “Payee” means any party who receives from the State an aggregate payment of $25,000 in a fiscal year.
(ii)    “Payee” does not include:
1.    a State employee with respect to the employee’s compensation; or
2.    a State retiree with respect to the retiree’s retirement allowance.
(4)    “Searchable website” means a website created in accordance with this section that displays and searches State payment data.
(b)    (1)    The Department shall develop and operate a single searchable website, accessible to the public at no cost through the Internet.
(2)    On or before the 15th day of the month that follows the month in which an agency makes a payment to a payee, the Department shall update the payment data on the searchable website.
(c)    The searchable website shall contain State payment data, including:
(1)    the name of a payee receiving a payment;
(2)    the location of a payee by postal zip code;
(3)    the amount of a payment; and
(4)    the name of an agency making a payment.
(d)    The searchable website shall allow the user to:
(1)    search data for fiscal year 2008 and each year thereafter; and
(2)    search by the following data fields:
(i)    a payee receiving a payment;
(ii)    an agency making a payment; and
(iii)    the zip code of a payee receiving a payment.
(e)    State agencies shall provide appropriate assistance to the Secretary to ensure the existence and ongoing operation of the single website.
(f)    This section may not be construed to require the disclosure of information that is confidential under State or federal law.
(g)    This section shall be known and may be cited as the “Maryland Funding Accountability and Transparency Act”.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 3 - Information Processing and Security › Section 3.5-314 - Training for Employees Handling Security-Sensitive Data

(a)    In this section, “security–sensitive data” means information that is protected against unwarranted disclosure.
(b)    In accordance with guidelines established by the Secretary, each unit of State government shall develop a plan to:
(1)    identify unit personnel who handle security–sensitive data; and
(2)    establish annual security overview training or refresher security training for each employee who handles security–sensitive data as part of the employee’s duties.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 3 - Information Processing and Security › Section 3.5-315 - Information Sharing and Analysis Center -- Responsibilities

(a)    There is an Information Sharing and Analysis Center in the Department.
(b)    The Information Sharing and Analysis Center shall:
(1)    coordinate information on cybersecurity by serving as a central location for information sharing across State and local government, federal government partners, and private entities;
(2)    with the Office of Security Management, support cybersecurity coordination between local units of government through existing local government stakeholder organizations;
(3)    provide support to the State Chief Information Security Officer and the Cyber Preparedness Unit, in the Maryland Department of Emergency Management, during cybersecurity incidents that affect State and local governments;
(4)    support risk–based planning for the use of federal resources; and
(5)    conduct analyses of cybersecurity incidents.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 3 - Information Processing and Security › Section 3.5-317 - Independent Contractors -- Regular Assessments -- Information for Assessments

(a)    This section does not apply to:
(1)    the Maryland Port Administration;
(2)    the University System of Maryland;
(3)    St. Mary’s College of Maryland;
(4)    Morgan State University;
(5)    the Maryland Stadium Authority;
(6)    Baltimore City Community College;
(7)    the State Board of Elections;
(8)    the Office of the Attorney General;
(9)    the Comptroller; or
(10)    the State Treasurer.
(b)    (1)    The Department shall hire independent contractors to:
(i)    develop a framework for investments in technology; and
(ii)    at least once every 2 years, in accordance with the framework, assess the cybersecurity and information technology systems in each unit of State government.
(2)    The framework shall include the following criteria:
(i)    security risks to the system;
(ii)    system performance;
(iii)    the system’s dependence on other information technology or cybersecurity systems and data;
(iv)    the system’s ability to create an efficient and seamless experience for users;
(v)    the system’s effectiveness in achieving unit objectives;
(vi)    the system’s effectiveness in meeting the needs of citizens and customers;
(vii)    the costs to maintain and operate the system;
(viii)    the speed of government response time;
(ix)    the effectiveness of the system in regard to the unit’s objectives;
(x)    improvements to the unit’s relative audit findings attributable to the system; and
(xi)    an assessment of the system using the National Institute of Standards and Technology Cybersecurity Framework.
(c)    Each unit shall promptly provide a contractor employed under subsection (b) of this section with the information necessary to perform the assessments.
(d)    (1)    Every 2 years, a contractor shall provide the results of the assessments to:
(i)    the Modernize Maryland Commission established under § 3.5–316 of this subtitle; and
(ii)    in accordance with § 2–1257 of the State Government Article, the Senate Budget and Taxation Committee, the Senate Education, Health, and Environmental Affairs Committee, and the House Health and Government Operations Committee.
(2)    The report submitted under paragraph (1)(ii) of this subsection may not contain information about the security of an information system.
(e)    The Department may use multiple contractors at a time to meet the requirements of this section.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 4 - Telecommunications › Section 3.5-401 - Coordination of Telecommunications Equipment, Systems, and Services

(a)    The Department shall:
(1)    coordinate the development, management, and operation of telecommunication equipment, systems, and services by State government;
(2)    acquire and manage common user telecommunication equipment, systems, or services and charge units of State government for their proportionate share of the costs of installation, maintenance, and operation of the common user telecommunication equipment, systems, or services;
(3)    promote compatibility of telecommunication systems by developing policies, procedures, and standards for the acquisition and use of telecommunication equipment, systems, and services by units of State government;
(4)    coordinate State government telecommunication systems and services by reviewing requests by units of State government for telecommunication equipment, systems, or services;
(5)    advise units of State government about planning, acquisition, and operation of telecommunication equipment, systems, or services; and
(6)    provide radio frequency coordination for State and local governments in accordance with regulations of the Federal Communications Commission.
(b)    The Department may make arrangement for a user other than a unit of State government to have access to and use of State telecommunication equipment, systems, and services and shall charge the user any appropriate amount to cover the cost of installation, maintenance, and operation of the telecommunication equipment, system, or service provided.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 4 - Telecommunications › Section 3.5-402 - Scope

(a)    The provisions of this subtitle do not apply to a telecommunication system or service that is owned or operated by the University System of Maryland, Morgan State University, Baltimore City Community College, or a unit of the Legislative or Judicial Branch.
(b)    The provisions of this subtitle do not preempt the authority of the Maryland Public Broadcasting Commission to own, operate, or manage telecommunication equipment, systems, or services.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 4 - Telecommunications › Section 3.5-403 - Consistency With Statewide Information Technology Policies, Standards, and Master Plan

Telecommunications, including those of the Maryland Public Broadcasting System, shall be consistent with statewide information technology policies and standards and the statewide information technology master plan.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 4 - Telecommunications › Section 3.5-405 - Local Cybersecurity Preparedness and Response Plans

(a)    This section does not apply to municipal governments.
(b)    In a manner and frequency established in regulations adopted by the Department, each county government, local school system, and local health department shall in consultation with the local emergency manager, create or update a cybersecurity preparedness and response plan and complete a cybersecurity preparedness assessment.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 4 - Telecommunications › Section 3.5-406 - Annual Reports -- Items Included -- Cybersecurity Preparedness Assessments Performed -- Cybersecurity Incidents

(a)    On or before December 1 each year, each unit of State government shall:
(1)    report the results of any cybersecurity preparedness assessments performed in the prior year to the Office of Security Management in accordance with guidelines developed by the Office; and
(2)    submit a report to the Governor and the Office of Security Management that includes:
(i)    an inventory of all information systems and applications used or maintained by the unit;
(ii)    a full data inventory of the unit;
(iii)    a list of all cloud or statistical analysis system solutions used by the unit;
(iv)    a list of all permanent and transient vendor interconnections that are in place;
(v)    the number of unit employees who have received cybersecurity training;
(vi)    the total number of unit employees who use the network;
(vii)    the number of information technology staff positions, including vacancies;
(viii)    the number of noninformation technology staff positions, including vacancies;
(ix)    the unit’s information technology budget, itemized to include the following categories:
1.    services;
2.    equipment;
3.    applications;
4.    personnel;
5.    software licensing;
6.    development;
7.    network projects;
8.    maintenance; and
9.    cybersecurity;
(x)    any major information technology initiatives to modernize the unit’s information technology systems or improve customer access to State and local services;
(xi)    the unit’s plans for future fiscal years to implement the unit’s information technology goals;
(xii)    compliance with timelines and metrics provided in the Department’s master plan; and
(xiii)    any other key performance indicators required by the Office of Security Management to track compliance or consistency with the Department’s statewide information technology master plan.
(b)    (1)    Each unit of State government shall report a cybersecurity incident in accordance with paragraph (2) of this subsection to the State Chief Information Security Officer.
(2)    For the reporting of cybersecurity incidents under paragraph (1) of this subsection, the State Chief Information Security Officer shall determine:
(i)    the criteria for determining when an incident must be reported;
(ii)    the manner in which to report; and
(iii)    the time period within which a report must be made.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 4 - Telecommunications › Section 3.5-407 - Local Cybersecurity Preparedness and Response Plans -- Report of Incidents

(a)    This section does not apply to municipal governments.
(b)    In a manner and frequency established in regulations adopted by the Department, each county government, local school system, and local health department shall:
(1)    in consultation with the local emergency manager, create or update a cybersecurity preparedness and response plan; and
(2)    complete a cybersecurity preparedness assessment.
(c)    The assessment required under paragraph (b)(2) of this section may, in accordance with the preference of each county government, be performed by the Department or by a vendor authorized by the Department.
(d)    (1)    Each local government shall report a cybersecurity incident, including an attack on a State system being used by the local government, to the appropriate local emergency manager and the State Security Operations Center in the Department in accordance with paragraph (2) of this subsection.
(2)    For the reporting of cybersecurity incidents to local emergency managers under subparagraph (i) of this paragraph, the State Chief Information Security Officer shall determine:
(i)    the criteria for determining when an incident must be reported;
(ii)    the manner in which to report; and
(iii)    the time period within which a report must be made.
(3)    The State Security Operations Center shall immediately notify the appropriate agencies of a cybersecurity incident reported under this subsection through the State Security Operations Center.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 7 - Senior Call-Check Service and Notification Program › Section 3.5-701 - Definitions

(a)    In this subtitle the following words have the meanings indicated.
(b)    “Eligible participant” means a resident of the State who is at least 65 years old.
(c)    “Person of record” includes a local law enforcement unit or other local government agency that chooses to participate in the Program.
(d)    “Program” means the Senior Call–Check Service and Notification Program.
(e)    (1)    “Senior call–check service and notification” means a telephone call made or received each day at a regularly scheduled time by the Department of Aging or the Department of Aging’s designee to the residence of an eligible participant to verify that the participant is able to receive notifications and answer the telephone or place a call from the telephone.
(2)    “Senior call–check service and notification” includes:
(i)    an automated or live telephone call placed by an eligible participant or received by an eligible participant at a regularly scheduled time each day;
(ii)    if the eligible participant does not answer or place the regularly scheduled call and the Secretary of Aging designs the Program to require this action, one or more automated or live telephone calls to the eligible participant;
(iii)    if the eligible participant does not answer a telephone call made under item (ii) of this paragraph, an additional automated or live telephone call to notify a person of record whose name has been provided to the Department of Aging; and
(iv)    a notification to the eligible participant regarding information that the Secretary of Aging has determined to be relevant.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 3.5 - Department of Information Technology › Subtitle 7 - Senior Call-Check Service and Notification Program › Section 3.5-702 - Duties, Powers, Liabilities

(a)    The Department of Aging shall:
(1)    establish and administer the Program to provide senior call–check service and notification to eligible participants; and
(2)    adopt regulations necessary to implement the Program.
(b)    The Department of Aging may contract with a private vendor or nonprofit organization to provide the senior call–check service and notification required under subsection (a) of this section.
(c)    (1)    The State Tort Claims Act and the Local Government Tort Claims Act, as appropriate, apply to a State or local unit and to an employee or agent of a State or local unit that participates in the Program for services the unit or person provides under the Program in accordance with regulations of the Department of Aging.
(2)    A person of record and a volunteer may not be liable for reasonable acts or omissions directly arising from services the person provides under the Program in accordance with regulations of the Department of Aging.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 2 - Organization and General Authority of Department › Section 4-202 - Secretary of General Services

(a)    The head of the Department is the Secretary of General Services, who shall be appointed by the Governor with the advice and consent of the Senate.
(b)    Before taking office, the appointee shall take the oath required by Article I, § 9 of the Maryland Constitution.
(c)    (1)    The Secretary serves at the pleasure of the Governor and is responsible directly to the Governor. The Secretary shall advise the Governor on all matters assigned to the Department and is responsible for carrying out the Governor’s policies on those matters.
(2)    The Secretary is responsible for the operation of the Department and shall establish guidelines and procedures to promote the orderly and efficient administration of the Department. The Secretary may establish, reorganize, or abolish areas of responsibility in the Department as necessary to fulfill the duties assigned to the Secretary.
(3)    The Secretary is responsible for establishing policy to be followed by the units in the Department.
(d)    The Secretary is entitled to the salary provided in the State budget.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 2 - Organization and General Authority of Department › Section 4-203 - Deputy Secretary, Consultants, and Other Staff

(a)    (1)    With the approval of the Governor, the Secretary shall appoint a Deputy Secretary.
(2)    The Deputy Secretary:
(i)    is in the executive service of the State Personnel Management System and serves at the pleasure of the Secretary;
(ii)    is entitled to the salary provided in the State budget; and
(iii)    has the duties provided by law or delegated by the Secretary.
(b)    (1)    The Secretary may employ a staff attached to the Office of the Secretary in accordance with the Code or the State budget.
(2)    Each staff assistant in the Office of the Secretary in charge of a particular area of responsibility and each professional consultant is in the executive service, management service, or is a special appointment in the State Personnel Management System and is appointed by and serves at the pleasure of the Secretary.
(3)    Except as provided in this section or otherwise by law, the Secretary shall appoint and remove all other staff in the Office of the Secretary in accordance with the provisions of the State Personnel and Pensions Article.
(4)    The Secretary may review any personnel action taken by any unit in the Department. The Secretary may delegate the power to approve any appointment or removal to the head or governing body of any unit in the Department.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 2 - Organization and General Authority of Department › Section 4-204 - General Authority and Duties of Secretary

(a)    The Secretary is responsible for the budget of the Office of the Secretary and for the budget of each unit in the Department.
(b)    (1)    The Secretary may adopt regulations for the Department and its units.
(2)    The Secretary shall review and may approve, disapprove, or revise regulations of any unit of the Department.
(c)    The Secretary may create any advisory body of any size that the Secretary considers appropriate for the operation of the Department.
(d)    The Secretary shall have a seal.
(e)    (1)    The Secretary is responsible for the planning of activities, programs, and services of the Department.
(2)    The Secretary may review, approve, disapprove, or modify the plans, proposals, and projects of the units in the Department.
(f)    On or before December 1 of each year, the Secretary shall send a report to the Governor on the activities of the Department during the previous fiscal year.
(g)    (1)    Except as otherwise provided in paragraph (2) of this subsection, the Secretary may exercise any authority that is granted to any unit in the Department.
(2)    This subsection does not authorize the Secretary to exercise any authority granted to the General Professional Services Selection Board.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 2 - Organization and General Authority of Department › Section 4-205 - Counsel to Department

(a)    This section does not apply to a unit in the Department to the extent that the unit is permitted by law to employ its own legal adviser or counsel.
(b)    The Attorney General is legal adviser to the Department.
(c)    The Attorney General shall assign to the Department the number of Assistant Attorneys General authorized by law to be assigned to the Department and to its units.
(d)    (1)    The Attorney General shall designate 1 of the Assistant Attorneys General assigned to the Department as counsel to the Department. After the Attorney General designates the counsel to the Department, the Attorney General may not reassign the counsel without consulting the Secretary.
(2)    The counsel may have no duty other than to give the legal aid, advice, and counsel required by the Secretary or any other official of the Department, to supervise the other Assistant Attorneys General assigned to the Department, and to perform for the Department the duties that the Attorney General assigns. The counsel shall perform these duties subject to the control and supervision of the Attorney General.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 2 - Organization and General Authority of Department › Section 4-206 - Units in Department

(a)    The following units are in the Department:
(1)    the Board of Architectural Review;
(2)    the Office of State Procurement; and
(3)    any other unit that is in the Department under any other law.
(b)    Each unit in the Department shall report to the Secretary.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 2 - Organization and General Authority of Department › Section 4-209 - Display of Pictures of Abducted Children in State Buildings

The Department of General Services, the Department of Transportation, and the University System of Maryland shall reserve a reasonable amount of space in State buildings under their control, subject to regulations adopted by the Board of Public Works, so that any law enforcement agency or State recognized nonprofit advocacy group for abducted children can display the picture of a child abducted in a noncustody-related abduction in the reserved space.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 2 - Organization and General Authority of Department › Section 4-210 - Pow/mia Flag on State Building Grounds

(a)    In this section, “POW/MIA flag” means the POW/MIA flag of the National League of Families of American Prisoners and Missing in Southeast Asia.
(b)    This section does not apply to:
(1)    the State House; or
(2)    a State building that:
(i)    is a historic building; or
(ii)    1.    has a flagpole attached to the building; and
2.    is determined to be structurally unable to withstand additional flags being flown from the flagpole.
(c)    The Secretary of General Services and the Secretary of Transportation shall cause the POW/MIA flag to be flown on the grounds of all State buildings under their control whenever the flag of the United States is flown.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 3 - Procurement › Part I - Definitions; General Provisions › Section 4-301 - Definitions

(a)    In this subtitle the following words have the meanings indicated.
(b)    “Bid” means a bid, proposal, or other response to a solicitation.
(c)    (1)    “Services” means the rendering of time, effort, or work, rather than the furnishing of a specific physical product other than reports incidental to the required performance.
(2)    “Services” includes maintenance, construction–related services, architectural services, engineering services, and the professional, personal, or contractual services provided by attorneys, accountants, physicians, consultants, and other professionals who are independent contractors.
(d)    “Supplies” means tangible property, including equipment and materials.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 3 - Procurement › Part I - Definitions; General Provisions › Section 4-304 - Conflict of Interest

(a)    The Secretary or any employee of the Department may not:
(1)    be interested in any contract or bid for furnishing any supplies to any unit that procures supplies under Division II of this article;
(2)    be connected in any manner, directly or indirectly, with any contract or bid for furnishing any supplies to any of those units; or
(3)    accept or receive, directly or indirectly, whether by rebate, gift, or otherwise, from a person to whom a contract may be awarded:
(i)    any money or thing of value; or
(ii)    any promise, obligation, or contract for future reward or compensation.
(b)    If the Secretary or any employee of the Department violates any provision of this section, the Secretary or employee is guilty of a misdemeanor and on conviction is subject to a fine not less than $1,000 or imprisonment not exceeding 6 months or both.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 3 - Procurement › Part I - Definitions; General Provisions › Section 4-305 - Printing

Any contract for printing for the State shall be made through or with the approval of the Secretary except for:
(1)    a contract for printing for the General Assembly and its staff agencies;
(2)    a contract for printing a record or brief for the Office of the Attorney General; and
(3)    a contract for printing of the Maryland Reports or the Maryland Appellate Reports.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 3 - Procurement › Part I - Definitions; General Provisions › Section 4-306 - Inventory

(a)    The Secretary shall adopt standards for maintaining stores and inventory control for all supplies required by any unit that procures supplies under Division II of this article.
(b)    (1)    To the extent required by the Secretary, each unit that procures supplies under Division II of this article shall file with the Secretary an inventory of the supplies in its possession.
(2)    The unit shall submit the inventory to the Secretary at least once a year.
(3)    The inventory is subject to audit.
2023 Maryland Statutes › State Finance and Procurement › Division I - State Finance › Title 4 - Department of General Services › Subtitle 3 - Procurement › Part I - Definitions; General Provisions › Section 4-308 - State Purchasing Program for Local Governments

(a)    The Department may establish a program that leverages State purchasing power to offer favorable rates to units of local government to procure information technology or cybersecurity services from contractors.
(b)    A unit of local government may not be required to participate in a program established under subsection (a) of this section.