Md. Code Regs. 20.06.01.02

Current through Register Vol. 51, No. 22, November 1, 2024

Section 20.06.01.02 - Definitions

A. In this chapter, the following terms have the meanings indicated.

B. Terms Defined.

(1) "Cybersecurity breach" means any unauthorized act that has been confirmed to result in access to acquisition, control, destruction, disclosure, or modification of a utility's information technology systems, operations technology systems, or smart grid systems.

(2) "Good cybersecurity practice" means cybersecurity plans that are designed, implemented, maintained, and operated in accordance with an accepted industry cybersecurity standard and in compliance with all applicable federal and State requirements.

(3) "Information technology system" means hardware and software related to electronic processing, and storage, retrieval, transmittal, and manipulation of data.

(4) "Operations technology system" means a system or network that monitors or controls electric, gas, or water system infrastructure used for utility operations.

(5) "Smart grid system" means a system or network that enables a utility to gather and store personally identifiable customer information from customer devices or allows for the control of customer devices.

(6) "Utility" means any electric company, gas company, or water company regulated by the Commission.

Md. Code Regs. 20.06.01.02

Regulation .02 adopted effective 49:15 Md. R. 739, eff. 7/25/2022