<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".01" citation="COMAR 20.06.01.01" title_num="20" subtitle_num="06" chapter_num="01" heading="Scope.">
  <paragraph num="A.">
    <text>This chapter applies to all public service companies subject to cybersecurity requirements in Public Utilities Article, §5-306, Annotated Code of Maryland.</text>
  </paragraph>
  <paragraph num="B.">
    <text>This chapter also broadly applies to all cybersecurity devices necessary for the adequate, economical, and efficient delivery of public service company services in Maryland.</text>
  </paragraph>
  <paragraph num="C.">
    <text>Applicable Standards. Unless otherwise specified by the Commission, the public service company shall use the applicable provisions in the latest revised version of the National Institute of Standards Special Publication 800-207, Zero Trust Architecture, August 2020 publication.</text>
  </paragraph>
</regulation>