The Chief Information Officer shall establish and maintain:

1. 1. List of prohibited companies A list of companies, including foreign adversary business entities, that pose a national security risk or a risk to the security and safety of persons of the United States. The list must include, but is not limited to, all companies identified by statute, regulation or official guidance from the United States Department of Commerce, the Federal Communications Commission, the United States Department of Homeland Security or any other appropriate federal agency as posing a national security risk or a risk to the security and safety of persons of the United States; and

   [PL 2023, c. 681, §1 (NEW).]

2. 2. List of prohibited information and communications technology and services A list of information and communications technology and services that pose a national security risk or a risk to the security and safety of persons of the United States. The list must include, but is not limited to, all information and communications technology and services identified by statute, regulation or official guidance from the United States Department of Commerce, the Federal Communications Commission, the United States Department of Homeland Security or any other appropriate federal agency as posing a national security risk or a risk to the security and safety of persons of the United States.

   [PL 2023, c. 681, §1 (NEW).]

PL 2023, c. 681, §1 (NEW).