Local Cybersecurity Preparedness and Local Cybersecurity Support Fund - Alterations
Impact
The bill is designed to allocate resources effectively and ensure that local governments can strengthen their defenses against cyber threats. It facilitates financial support for necessary upgrades to technology, recruitment of IT staff focused on cybersecurity, and provides training for personnel involved in cybersecurity. The establishment of regular cybersecurity assessments and reporting requirements aims to foster accountability and enhance the overall security posture of local entities. This ensures that local governments are not only equipped to respond to cybersecurity incidents but are also proactively working to prevent them.
Summary
Senate Bill 981 establishes the Local Cybersecurity Support Fund, which aims to enhance cybersecurity preparedness among local governments in Maryland, including local school systems and health departments. It authorizes the Governor to include budget appropriations for the Fund, enabling local entities to access financial assistance for improving their cybersecurity infrastructure. The bill mandates specific cybersecurity practices, such as implementing multi-factor authentication and endpoint detection protocols by July 2025 for local school systems, thereby prioritizing robust security measures in public institutions.
Contention
While the bill has significant support for its potential to improve local cybersecurity, notable concerns have been raised about the implications of mandated practices and the allocation of funding. Funding limitations may hinder smaller local governments from fully implementing the required security measures. Moreover, there are worries regarding the balance of responsibility between state and local governments in managing cybersecurity threats, which may lead to disparities in preparedness across different regions. These issues prompt discussions on the adequacy of resources and support necessary for enforcing the stipulated cybersecurity practices effectively.
Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.
Relating to the establishment of the Texas Cyber Command and the transfer to it of certain powers and duties of the Department of Information Resources.