Department of the Environment - Community Water and Sewerage Systems - Cybersecurity Planning and Assessments

SB 871 requires Maryland's community water and sewer system providers to implement cybersecurity measures and report incidents to the Department of the Environment. It mandates these providers to follow minimum security standards meeting federal benchmarks, develop plans for service disruptions from cyberattacks (like ransomware), and complete staff training on cybersecurity. The Department of Environment must coordinate with IT and emergency management departments to establish these requirements, update regulations, and maintain a list of approved training programs. The law also prohibits public record inspections related to critical infrastructure security, focusing on concrete operational changes for water and sewer systems.