# COMAR Title 20 — Public Service Commission

## Subtitle 63 — Community Choice Aggregation

### Chapter 16 — Data Privacy

#### Regulation .03 Cybersecurity Plans.

*COMAR 20.63.16.03*

As part of its Aggregation Plan, as described in COMAR 20.63.11.02, the CCA shall submit to the Commission a proposed cybersecurity plan, including:

A. Cybersecurity-related governance, risk management, procurement practices, personnel hiring, training policies, situational awareness, response, recovery, and transparent reporting of cybersecurity incidents to State and federal entities;

B. How the CCA will inform the Commission of a cybersecurity breach; and

C. An explanation of the application of the county’s cybersecurity plan, policies, procedures, and support to the CCA, if applicable.