State Government - State and Local Government Employees and Contractors - Cybersecurity Training
Impact
The implementation of SB107 will affect laws related to the responsibilities and training of employees working in and with state and local government units. By requiring all employees who access government computer systems to undergo regular certified cybersecurity training, the bill aims to mitigate cybersecurity risks associated with human errors. It also holds the state chief information security officer accountable for coordinating the training and certification processes to maintain high standards in cybersecurity practices.
Summary
Senate Bill 107 focuses on enhancing cybersecurity training requirements for state and local government employees and contractors in Maryland. The bill mandates the development of a comprehensive Cybersecurity Awareness and Training Program by the Maryland Cybersecurity Coordinating Council. This initiative aims to ensure that all relevant personnel are equipped with sufficient cybersecurity knowledge and skills to effectively safeguard state and local government information systems and data against growing cyber threats.
Contention
Notable points of contention surrounding SB107 may include concerns over the feasibility of creating a uniform training program that addresses the diverse needs of various government entities. Additionally, there may be discussions on the potential financial implications for local governments in adhering to the mandated training requirements, as well as debates regarding the adequacy and effectiveness of the proposed training standards. Critics might argue that while cybersecurity is crucial, the bill should consider the varying capacities and resources of different local units.
Relating to the requirement by certain governmental entities for diversity, equity, and inclusion statements and training from employees, prospective employees, and contractors.
Requires a background investigation of employees, prospective employees, contractors and prospective contractors of certain governmental agencies. (BDR 38-1122)
Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.
Relating to the establishment of the Texas Cyber Command and the transfer to it of certain powers and duties of the Department of Information Resources.