(a) In this section, “security–sensitive data” means information that is protected against unwarranted disclosure.
(b) In accordance with guidelines established by the Secretary, each unit of State government shall develop a plan to:
(1) identify unit personnel who handle security–sensitive data; and
(2) establish annual security overview training or refresher security training for each employee who handles security–sensitive data as part of the employee’s duties.
Structure Maryland Statutes
Title 3A - Department of Information Technology
Subtitle 3 - Information Processing and Security
Section 3A-303 - Duties of Secretary
Section 3A-304 - Statewide Master Plan
Section 3A-305 - Development of Policies, Standards, and Plans by Units of State Government
Section 3A-306 - Consistency With Master Plan -- in General
Section 3A-307 - Consistency With Master Plan -- Review of Projects and Proposals
Section 3A-308 - Information Technology Project Requests
Section 3A-309 - Major Information Technology Development Fund
Section 3A-310 - Construction of Subtitle
Section 3A-311 - Nonvisual Access Clause
Section 3A-312 - Delegation of Duties
Section 3A-313 - Maryland Funding Accountability and Transparency Act of 2008
Section 3A-314 - Training for Employees Handling Security-Sensitive Data