Md. Code, State Finance and Procurement § 13-115
This is the official text of Md. Code, State Finance and Procurement § 13-115, part of Maryland’s Code, State Finance and Procurement — governs the state budget and government contracting.
Not legal advice. This page reproduces the official text of a government statute for reference only. Laws change, and how a statute applies depends on your specific facts. For advice about your situation, consult a licensed attorney in your state.
§13–115.
Official statutory text
(a) The Department of Information Technology shall require basic security requirements to be included in a contract:
(1) in which a third–party contractor will have access to and use State telecommunication equipment, systems, or services; or
(2) for systems or devices that will connect to State telecommunication equipment, systems, or services.
(b) The security requirements developed under subsection (a) of this section shall be consistent with a widely recognized security standard, including National Institute of Standards and Technology SP 800–171, ISO27001, or Cybersecurity Maturity Model Certification.
(1) in which a third–party contractor will have access to and use State telecommunication equipment, systems, or services; or
(2) for systems or devices that will connect to State telecommunication equipment, systems, or services.
(b) The security requirements developed under subsection (a) of this section shall be consistent with a widely recognized security standard, including National Institute of Standards and Technology SP 800–171, ISO27001, or Cybersecurity Maturity Model Certification.
Status: in_force · Read it on the official government site
Need a lawyer in Maryland?
Find a Maryland lawyer
About this page: Statute text is reproduced from official government publishers via the
Open US Law dataset
(Vaquill AI, snapshot v2026.08, CC BY 4.0). Primary legislative text like this is public domain under the government-edicts doctrine
(Georgia v. Public.Resource.Org, 2020). We link every section back to its official source so you can verify it independently.