Skip to Content Accessibility Information
The Maryland Department of Information Technology has updated our website to improve navigation, accessibility, and your overall experience—take a look around!
If you have any questions or feedback​ let us know​​.​
Go To Home Page
​Department of ​Information Technology
  • Home
  • Services & Initiatives
    • AI
    • Cloud Hosting, Backup and Storage
    • Communications
    • Cybersecurity
    • Data Analytics, Management and Visualization
    • Network and Wi-Fi Services
    • Office Tech and Productivity
    • Websites and Applications
  • Policies & Guidance
    • Accessibility
    • AI
    • Cybersecurity
    • Departmental
    • Hardware
    • MITDP
    • Telework
    • Websites and Data
  • IT Contracts & Procurement
    • State Agency Procurement Steps
    • DoIT Contracts
    • Statewide Contracts
    • Doing Business with DoIT
  • MITDP Oversight
    • SDLC Template Library
    • MITDP Oversight Process
    • System Development Life Cycle (SDLC)
  • About DoIT
    • Leadership
    • Portfolio Officers
    • Security Officers
    • Offices
    • Boards, Committees and Commissions
    • Press

Breadcrumb Navigation

    Skip Navigation Links
  • Home
  • Policies & Guidance
  • Cybersecurity

Section Menu

  • Browse by Policy Type
    • Accessibility
    • AI
    • Cybersecurity
    • Departmental
    • Hardware
    • MITDP
    • Telework
    • Website

Cybersecurity

Page Content

​Is there a cybersecurity incident you wish to report?

Report a cybersecurity incident

​

Emergency Directives

  • Prohibited Technologies (Updated 2024)

  • Prohibited Offshore Resources, Personnel, Contractors (Updated 2025-05-01)

  • Offshore Resource Utilization Vendor Risk Assessment Questionnaire

IT Security Manual

  • IT Security Manual

Policies

A “policy” in the context of the “Cybersecurity” section is something that’s required.

  • G21-1 External User Authentication

  • G21-2 Password Managers and Use

  • Communication Recordings

  • Emergency and Binding Operational Directives

  • IT Security Policy

  • State of Maryland Foreign Travel Policy

  • Data Classification Policy

Standards

  • 2023 State Minimum Cybersecurity Standards

  • Cybersecurity Incident Reporting Requirements for Local Governments

  • Cybersecurity Incident Reporting Requirements for State Government

  • ​Cybersecurity Incident ​Reporting Requirements for Utility Providers

  • Minimum Security Standard for Units of Government on networkMaryland

  • State Minimum Cyber Standards Best Practices Guidebook

Guidelines

  • Guidelines for Locals to Certify Compliance with State Min Cybersecurity Standards Guidelines for the Public Disclosure of Cybersecurity Incidents

  • Guidelines for the Public Disclosure of Cybersecurity Incidents

Site Logo
Department of ​Information Technology
​​​​100 Community Place, Crownsville, MD 21032

300-301 West Preston Street, Baltimore MD 21201
​
Phone: 410-697-9700
Maryland Relay: 7-1-1​
  • ​​​​​​​​​Analytics
  • ​​​​Contact Us​
  • Services
  • Find my Portfolio Officer​