In this subtitle the following words have the meanings indicated. “Board” means the Cyber Maryland Board. “Fund” means the Cyber Maryland Fund. “Program” means the Cyber Maryland Program.

There is a Cyber Maryland Program in the Department. The purposes of the Program are to: create and execute a talent pipeline that materially reduces workforce vacancies by July 1, 2026; serve as a one–stop shop for employers seeking to leverage cyber workforce development programs offered by the State and its partners; inform cybersecurity training and education programs operated by public or private entities with industry–driven needs; build the most advanced local and State information technology workforce in the nation, which, to the maximum extent possible, reflects the racial, gender, ethnic, and geographic diversity of the State; coordinate and accelerate cybersecurity research and innovation in the State; and support the efforts of the Department of Information Technology to improve the State government’s cybersecurity posture, including State agencies, local government units, and critical infrastructure. The Program shall: conduct ongoing research by collaborating with the Cybersecurity Association, Inc., Cybersecurity Talent Advisory Board to collect and analyze real–time industry data to identify cybersecurity workforce needs as described in the U.S. Chamber of Commerce Talent Pipeline Management Approach; use the results of the research described in item (1) of this subsection to increase the effectiveness of existing State cybersecurity workforce programs for employers in the State; facilitate partnerships for new training and education programs to address the workforce needs identified under item (1) of this subsection; develop a statewide strategic plan for cybersecurity workforce development, using the results of the research described in item (1) of this subsection and with input from the Cybersecurity Association, Inc., Cybersecurity Talent Advisory Board on or before December 1, 2023; develop, promote, support, and invest in talent improvement strategies, such as strategies that leverage the U.S. Chamber of Commerce Talent Pipeline Management Approach; and ensure that outcomes of the Program are inclusive and, to the maximum extent practicable, reflect the racial, gender, ethnic, and geographic diversity of the State. Beginning in fiscal year 2026, the Program, in consultation with the Board, shall award competitive grants or contracts to enhance cybersecurity workforce development, including cybersecurity for operational technology.

There is a Cyber Maryland Fund. The purposes of the Fund are to: achieve the purposes identified under § 11–1702(b) of this subtitle; and support innovative approaches to meeting cybersecurity workforce needs. The Department shall administer the Fund. The Fund is a special, nonlapsing fund that is not subject to § 7–302 of the State Finance and Procurement Article. The State Treasurer shall hold the Fund separately, and the Comptroller shall account for the Fund. The Fund consists of: money appropriated in the State budget to the Fund; and any other money from any other source accepted for the benefit of the Fund. The Fund may be used only for: administrative expenses of the Program, including hiring staff in accordance with the State budget and hiring consultants and other professionals as necessary to implement, maintain, and administer the Program and the Fund; and providing grants to elementary and secondary schools, institutions of higher education, including community colleges, employers, including for–profit corporations, nonprofit organizations, registered apprenticeship sponsors, local workforce boards, industry associations, labor unions, local governments, local or regional economic development entities, and other relevant partner entities at the Department’s discretion to operate cybersecurity programs based on the strategic plan of the Program. The Department shall adopt standards to award grants under this section. The State Treasurer shall invest the money of the Fund in the same manner as other State money may be invested. Any interest earnings of the Fund shall be credited to the General Fund of the State. Expenditures from the Fund may be made only in accordance with the State budget. For fiscal year 2026, the Governor may include in the annual budget bill an appropriation of $3,100,000 for the Fund to be used for the awarding of grants and contracts under § 11–1702(d) of this subtitle aligned with the strategy of and approved by the Board. For fiscal year 2027 and each fiscal year thereafter, the Governor may include in the annual budget bill an appropriation sufficient to run the Program. The Program shall seek alternate funding sources to include cost–sharing or cost–matching agreements from sources other than the State, including the federal government, the private sector, and philanthropy, to supplement the money appropriated to the Fund under paragraph (1) of this subsection. Subject to the availability of funding, for fiscal year 2025 and each year thereafter, $250,000 of the Fund shall be used for implementing the U.S. Chamber of Commerce Talent Pipeline Management Approach. The Governor may include in the annual budget bill an appropriation in an amount sufficient for the Program, including to hire sufficient staff to carry out its duties.

There is a Cyber Maryland Board. The Board consists of the following members: the Senate and House of Delegates cochairs of the Joint Committee on Cybersecurity, Information Technology, and Biotechnology; the Secretary, or the Secretary’s designee; the Secretary of Commerce, or the Secretary’s designee; the Maryland Secretary of Veterans and Military Families, or the Secretary’s designee; the Secretary of Information Technology, or the Secretary’s designee; the Secretary of Higher Education, or the Secretary’s designee; the State Superintendent of Schools, or the Superintendent’s designee; the Chair of the Board of Directors of the Cybersecurity Association, Inc., or the Chair’s designee; the Chair of the Maryland Workforce Association, or the Chair’s designee; the Adjutant General, or the Adjutant General’s designee; the Chief Executive Officer of the Maryland Technology Development Corporation (TEDCO), or the Chief Executive Officer’s designee; and the following members, appointed by the Governor: five members from the private sector with cybersecurity needs; one representative from a nonprofit organization with expertise in cybersecurity talent development; one representative from a community college; one representative from a 4–year, public HBCU college; and one representative from a 4–year, public college. Subject to paragraph (2) of this subsection, the members of the Board shall elect a chair from among the members of the Board. The chair may not be: a State employee; or the Chief Executive Officer of the Maryland Technology Development Corporation (TEDCO). The Board shall: provide input regarding the development of the statewide cybersecurity workforce development strategic plan required under § 11–1702(c)(4) of this subtitle; assist the Program with stakeholder outreach and engagement; help the Program explore synergies where appropriate with cybersecurity workforce development efforts by regional and county workforce development entities; coordinate as necessary with the Department of Commerce and the Department; and provide other advice and support for the Program. A member of the Board: may not receive compensation as a member of the Board; but is entitled to reimbursement for expenses under the Standard State Travel Regulations, as provided in the State budget. To the extent practicable, the membership of the Board shall reflect the racial, gender, age, and geographic diversity of the State. The Board shall adopt bylaws that establish staggered terms for the members of the Board and procedures governing vacancies in membership.

On or before December 1 each year, beginning in 2026, the Program, in conjunction with the Department, shall submit a report on the operation and performance of the Program to the Governor and, in accordance with § 2–1257 of the State Government Article, the General Assembly. The report required under subsection (a) of this section shall include key performance metrics established by the Department that are aligned with the State strategy and goals for the Program and the progress of the Program against those metrics.