{"data":{"id":"us-md/md.-code-state-finance-and-procurement-13-115","jurisdiction":"us-md","citation":"Md. Code, State Finance and Procurement § 13–115","heading":"","body":"(a) The Department of Information Technology shall require basic security requirements to be included in a contract:\n(1) in which a third–party contractor will have access to and use State telecommunication equipment, systems, or services; or\n(2) for systems or devices that will connect to State telecommunication equipment, systems, or services.\n(b) The security requirements developed under subsection (a) of this section shall be consistent with a widely recognized security standard, including National Institute of Standards and Technology SP 800–171, ISO27001, or Cybersecurity Maturity Model Certification.","path":["Article - State Finance and Procurement"],"source_url":"https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gsf\u0026section=13-115","current_through":"2026-01-01","vintage":"","retrieved_at":"2026-09-14T20:00:48Z","sha256":"3c7f3962b1570c55f35679aa3251ccf32c94b1299b2118438412a50684dfefc3","source_id":"us-md","stale":false,"prev":"us-md/md.-code-state-finance-and-procurement-13-114","next":"us-md/md.-code-state-finance-and-procurement-13-116"},"notice":"GroundRules: Original legal text. Not legal advice."}