Procedure. Following an investigation and a determination by the Office of Cybersecurity, if there exists good cause to believe that a public service company violated Public Utilities Article, §5-306, Annotated Code of Maryland, or regulations in this subtitle, the Office of Cybersecurity may assess or negotiate a civil penalty under Public Utilities Article, §13-201, Annotated Code of Maryland, for violations and under Public Utilities Article, §13-205, Annotated Code of Maryland, for failures to submit reports and information with the prescribed form, contents, and deadlines. Penalty Considerations. In proposing a civil penalty for violations of Public Utilities Article, §5-306, Annotated Code of Maryland, or regulations in this subtitle, the Office of Cybersecurity shall consider the criteria stated in Public Utilities Article, §13-201, Annotated Code of Maryland. Filing with the Commission. Any proposed civil penalty shall be subject to approval, modification, or further hearing in accordance with Regulation .04 of this chapter. Payment Procedures. A public service company shall pay a civil penalty by submitting to the Commission a certified check or money order in the correct amount, payable to the Maryland Public Service Commission.