1. A. All public service companies that have 15,000 or more combined gas, electric, and water customers in Maryland shall provide periodic confidential cybersecurity briefings describing the company’s adherence to good cybersecurity practice, including the company’s cybersecurity maturity level trends, cybersecurity performance metric trends, or any other cybersecurity-related topics of current interest to the Commission and such additional representatives as the Commission designates.
2. B. Periodic confidential cybersecurity briefings shall be held at a minimum of every 3 years, or as otherwise directed by the Commission.

Authority: Public Utilities Article, §§2-112, 2-113, 2-121, 3-101, 3-104, and 3-113, Annotated Code of Maryland

Effective date: July 25, 2022 (49:15 Md. R. 739)

Regulation .01 amended effective December 12, 2024 (51:24 1081)

Regulation .02 amended effective December 12, 2024 (51:24 1081)

Regulation .03 amended effective December 12, 2024 (51:24 1081)

Regulation .04 amended effective December 12, 2024 (51:24 1081)

Regulation .05 amended effective December 12, 2024 (51:24 1081)

Regulation .06 adopted effective December 12, 2024 (51:24 1081)

Regulation .07 adopted effective December 12, 2024 (51:24 1081)

Regulation .08 adopted effective December 12, 2024 (51:24 1081)

Regulation .09 adopted effective December 12, 2024 (51:24 1081)