Md. Code, State Finance and Procurement § 13-115
Md. Code, State Finance and Procurement § 13-115
in effect(a) The Department of Information Technology shall require basic security requirements to be included in a contract:
(1) in which a third–party contractor will have access to and use State telecommunication equipment, systems, or services; or
(2) for systems or devices that will connect to State telecommunication equipment, systems, or services.
(b) The security requirements developed under subsection (a) of this section shall be consistent with a widely recognized security standard, including National Institute of Standards and Technology SP 800–171, ISO27001, or Cybersecurity Maturity Model Certification.
Source: Open US Law by Vaquill AI (CC BY 4.0)URL: https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gsf§ion=13-115&enactments=falseFetched: 10/17/2026