<?xml version='1.0' encoding='utf-8'?>
<section article="gps" article_name="Public Safety" number="14-1404" title_number="14" title_name="Emergency Management" subtitle_number="14">
  <level label="a">
    <text>The Branch shall:</text>
    <level label="1">
      <text>identify current and potential threats to the State’s critical infrastructure;</text>
    </level>
    <level label="2">
      <text>prioritize the State’s critical infrastructure assets by:</text>
      <level label="i">
        <text>in coordination with the Department of Information Technology, the Office of Security Management, and the Public Service Commission, determining the threat level to the State’s critical infrastructure, focusing on foreign actors, domestic actors, and insider threats;</text>
      </level>
      <level label="ii">
        <text>determining the impacts to the State’s critical infrastructure in the case of a cybersecurity or physical attack;</text>
      </level>
      <level label="iii">
        <text>understanding the effect that the compromise of one aspect of critical infrastructure may have on another aspect of critical infrastructure;</text>
      </level>
      <level label="iv">
        <text>engaging and coordinating with critical infrastructure sector leaders, military leaders, and other relevant stakeholders;</text>
      </level>
      <level label="v">
        <text>identifying the State’s critical infrastructure operational technology systems; and</text>
      </level>
      <level label="vi">
        <text>supporting the State’s critical infrastructure priority assets by:</text>
        <level label="1">
          <text>connecting priority assets to resources for conducting integrated assessments of the State’s critical infrastructure to detect and document vulnerabilities and operational dependencies;</text>
        </level>
        <level label="2">
          <text>identifying technical and grant opportunities to support remediation of identified vulnerabilities; and</text>
        </level>
        <level label="3">
          <text>establishing mechanisms to support shared learning and best practices between different critical infrastructure assets.</text>
        </level>
      </level>
    </level>
  </level>
  <level label="b">
    <text>The Department of Emergency Management shall coordinate consequence management efforts and respond to cascading impacts of an attack on the State’s critical infrastructure, in accordance with this title.</text>
  </level>
  <level label="c">
    <text>The Department of Information Technology, in consultation with the Center, shall:</text>
    <level label="1">
      <text>allow the owner or operator of critical infrastructure to become a member of the Maryland Information Sharing and Analysis Center;</text>
    </level>
    <level label="2">
      <text>provide up–to–date cybersecurity reporting standards to an owner or operator of critical infrastructure; and</text>
    </level>
    <level label="3">
      <text>direct critical infrastructure cybersecurity efforts across the units of State government.</text>
    </level>
  </level>
</section>
