SB 907 Maryland Senate · 2025 Regular Session

Cybersecurity - Standards, Compliance, and Audits - Alterations

This bill modifies Maryland's cybersecurity requirements for public schools by removing the mandate that county school boards prioritize purchasing digital devices with certain education funds. Instead, it requires local school systems to comply with state minimum cybersecurity standards and conduct a cybersecurity maturity assessment every two years, with certification due to the Department of Information Technology. The Department of Information Technology must annually update these cybersecurity standards, while the Office of Legislative Audits will reference them during relevant audits. Additionally, the state will provide information security officers to assist local school systems with cybersecurity functions, and reporting requirements for technology spending will now include specific data on cybersecurity expenditures.
Bill status in committee 1 of 4 stages cleared
Introduction
Feb 2025
Committee Review
Floor Vote
Governor
Introduced Feb 3, 2025 Last action Feb 5, 2025
Floor votes

How they voted

No floor votes recorded yet.
Full legislative history

Actions timeline

Total actions
2
Key actions
0
Committee
1
Feb 3, 2025
Committee
First Reading Education, Energy, and the Environment
upper
1 primary · 0 co-sponsors

Sponsors

Role
Legislator
Party
State
District
P
Photo of Katie Hester
Katie Hester
DDemocratic
MD
9