General. The Office of Cybersecurity may issue a NOPV upon finding good cause to believe a violation of this subtitle or cybersecurity requirements in Public Utilities Article, §5-306, Annotated Code of Maryland, has occurred. The NOPV may contain a proposed compliance order. A public service company shall respond in writing within 30 days after receipt of a NOPV. The Office of Cybersecurity may waive the requirements of §A(3) of this regulation upon written request from a public service company demonstrating good cause. Contents of Notice of Probable Violation. A NOPV shall include: A statement of the statute or regulation allegedly violated by a public service company; A description of the evidence indicating a possible violation; Notice of response options available to the public service company; If appropriate, the amount of the proposed civil penalty and the maximum civil penalty applicable under law; and If appropriate, a statement of the remedial action being sought in a compliance order. Response Options. A public service company shall respond to the NOPV as follows: If a NOPV contains a proposed compliance order, a public service company may: Agree to the proposed compliance order; Request the execution of a consent order; Object to the proposed compliance order and submit written explanations, information, or other materials in answer to the allegations in the notice; or Request a hearing under Public Utilities Article, §3-102, Annotated Code of Maryland; and If the NOPV contains a proposed civil penalty, a public service company may: Agree to pay the penalty; Submit an offer in compromise of the proposed civil penalty; Object to the proposed civil penalty and submit a written explanation, information, or other material to mitigate the proposed civil penalty; or Request a hearing under Public Utilities Article, §3-102, Annotated Code of Maryland. If a public service company objects to the proposed compliance order or civil penalty and submits a written explanation, information, or other materials in response to a NOPV, the Cybersecurity Director shall review the submissions and determine whether to negotiate further, modify, or withdraw the NOPV, or file a complaint under Public Utilities Article, §3-102, Annotated Code of Maryland.