<?xml version='1.0' encoding='utf-8'?>
<section article="gps" article_name="Public Safety" number="14-104.2" title_number="14" title_name="Emergency Management" subtitle_number="1" subtitle_name="Maryland Emergency Management Act">
  <level label="a">
    <level label="1">
      <text>In this section the following words have the meanings indicated.</text>
    </level>
    <level label="2">
      <text>“Fund” means the Local Cybersecurity Support Fund.</text>
    </level>
    <level label="3">
      <text>“Local government” includes local school systems, local school boards, and local health departments.</text>
    </level>
  </level>
  <level label="b">
    <level label="1">
      <text>There is a Local Cybersecurity Support Fund.</text>
    </level>
    <level label="2">
      <text>The purpose of the Fund is to:</text>
      <level label="i">
        <text>provide financial assistance to local governments to improve cybersecurity preparedness, including:</text>
        <level label="1">
          <text>updating current devices and networks with the most up–to–date cybersecurity protections;</text>
        </level>
        <level label="2">
          <text>supporting the purchase of new hardware, software, devices, and firewalls to improve cybersecurity preparedness;</text>
        </level>
        <level label="3">
          <text>recruiting and hiring information technology staff focused on cybersecurity;</text>
        </level>
        <level label="4">
          <text>paying outside vendors for cybersecurity staff training;</text>
        </level>
        <level label="5">
          <text>conducting cybersecurity vulnerability assessments;</text>
        </level>
        <level label="6">
          <text>addressing high–risk cybersecurity vulnerabilities identified by vulnerability assessments;</text>
        </level>
        <level label="7">
          <text>implementing and maintaining integrators and other similar intelligence sharing infrastructure that enable connection with the Information Sharing and Analysis Center in the Department of Information Technology; and</text>
        </level>
        <level label="8">
          <text>supporting the security of local wastewater treatment plants, including bicounty, county, and municipal plants, by acquiring or implementing cybersecurity–related upgrades to the plants; and</text>
        </level>
      </level>
      <level label="ii">
        <text>assist local governments applying for federal cybersecurity preparedness grants.</text>
      </level>
    </level>
    <level label="3">
      <text>The Secretary shall administer the Fund.</text>
    </level>
    <level label="4">
      <level label="i">
        <text>The Fund is a special, nonlapsing fund that is not subject to § 7–302 of the State Finance and Procurement Article.</text>
      </level>
      <level label="ii">
        <text>The State Treasurer shall hold the Fund separately, and the Comptroller shall account for the Fund.</text>
      </level>
    </level>
    <level label="5">
      <text>The Fund consists of:</text>
      <level label="i">
        <text>money appropriated in the State budget to the Fund;</text>
      </level>
      <level label="ii">
        <text>interest earnings; and</text>
      </level>
      <level label="iii">
        <text>any other money from any other source accepted for the benefit of the Fund.</text>
      </level>
    </level>
    <level label="6">
      <text>The Fund may be used only:</text>
      <level label="i">
        <text>to provide financial assistance to local governments to improve cybersecurity preparedness, including:</text>
        <level label="1">
          <text>updating current devices and networks with the most up–to–date cybersecurity protections;</text>
        </level>
        <level label="2">
          <text>supporting the purchase of new hardware, software, devices, and firewalls to improve cybersecurity preparedness;</text>
        </level>
        <level label="3">
          <text>recruiting and hiring information technology staff focused on cybersecurity;</text>
        </level>
        <level label="4">
          <text>paying outside vendors for cybersecurity staff training;</text>
        </level>
        <level label="5">
          <text>conducting cybersecurity vulnerability assessments;</text>
        </level>
        <level label="6">
          <text>addressing high–risk cybersecurity vulnerabilities identified by vulnerability assessments;</text>
        </level>
        <level label="7">
          <text>implementing or maintaining integrators and other similar intelligence sharing infrastructure that enable connection with the Information Sharing and Analysis Center in the Department of Information Technology; and</text>
        </level>
        <level label="8">
          <text>supporting the security of local wastewater treatment plants, including bicounty, county, and municipal plants, by acquiring or implementing cybersecurity–related upgrades to the plants;</text>
        </level>
      </level>
      <level label="ii">
        <text>to assist local governments applying for federal cybersecurity preparedness grants; and</text>
      </level>
      <level label="iii">
        <text>for administrative expenses associated with providing the assistance described under item (i) of this paragraph.</text>
      </level>
    </level>
    <level label="7">
      <level label="i">
        <text>The State Treasurer shall invest the money of the Fund in the same manner as other State money may be invested.</text>
      </level>
      <level label="ii">
        <text>Any interest earnings of the Fund shall be credited to the Fund.</text>
      </level>
    </level>
    <level label="8">
      <text>Expenditures from the Fund may be made only in accordance with the State budget.</text>
    </level>
  </level>
  <level label="c">
    <text>To be eligible to receive assistance from the Fund, a local government shall:</text>
    <level label="1">
      <text>provide proof to the Department of Information Technology that the local government conducted a cybersecurity preparedness assessment in the previous 12 months; or</text>
    </level>
    <level label="2">
      <text>within 12 months undergo a cybersecurity preparedness assessment provided by, in accordance with the preference of the local government:</text>
      <level label="i">
        <text>the Department of Information Technology at a cost to the local government that does not exceed the cost to the Department of Information Technology of providing the assessment; or</text>
      </level>
      <level label="ii">
        <text>a vendor authorized by the Department of Information Technology to complete cybersecurity preparedness assessments.</text>
      </level>
    </level>
  </level>
</section>
