As part of its Aggregation Plan, as described in COMAR 20.63.11.02, the CCA shall submit to the Commission a proposed cybersecurity plan, including: Cybersecurity-related governance, risk management, procurement practices, personnel hiring, training policies, situational awareness, response, recovery, and transparent reporting of cybersecurity incidents to State and federal entities; How the CCA will inform the Commission of a cybersecurity breach; and An explanation of the application of the county’s cybersecurity plan, policies, procedures, and support to the CCA, if applicable.