§9–2703.

    The Department of Information Technology shall:

        (1)    Employ a person trained in the cybersecurity of operational technology to:

            (i)    Work with the State Chief Information Security Officer and the Cyber Preparedness Unit in the Maryland Department of Emergency Management to support efforts related to water systems and other critical infrastructure; and

            (ii)    Coordinate with the Maryland Department of Emergency Management and local government information security officers to assist in protecting community water systems and community sewerage systems;

        (2)    Allow all members of the water and wastewater sector in the State to join the Maryland Information Sharing and Analysis Center to further strengthen cybersecurity efforts and information sharing within the sector; and

        (3)    In consultation with the Department, develop and promote a guidance document that:

            (i)    Provides standards that meet or exceed the federal Cybersecurity and Infrastructure Security Agency’s cross–sector cybersecurity performance goals; and

            (ii)    Outlines the best practices beyond minimum standards that can serve as a point of reference for enhancing the cybersecurity posture of community water system and community sewerage system providers.