The Maryland Department of Information Technology (DoIT) announced that partnerships with the security research community have helped identify and fix more than 200 unique cybersecurity vulnerabilities on public-facing State of Maryland IT assets. The effort is part of DoIT’s broader cybersecurity strategy to remediate vulnerabilities and strengthen state defenses.

DoIT recently hosted Hack the State 2 with 12 security researchers vetted by BugCrowd. Through legal reporting channels and bug bounty incentives, researchers identify qualifying vulnerabilities. Hack the State 2, combined with the existing Vulnerability Disclosure Program (VDP) launched last October, positions Maryland as a leader among states in this area. Few, if any, other states have programs of this size and scope. This program is one of several cybersecurity advances the State has made in the last year. In February, the State released the Cybersecurity and Privacy Policy Suite, a comprehensive governance framework that is hardening state systems by mandating advanced “zero-trust” cybersecurity practices. It has also expanded its cybersecurity information-sharing umbrella to ensure that local partners and critical infrastructure providers have access to up-to-date threat intelligence. 

Interested in getting a tech worker for a temporary project in your municipality?

The Maryland Department of Service and Civic Innovation has some exciting news about their Maryland Corps/Service Year Option program. The program seeks to place 18-24 year old high school graduates in full time 9.5 month roles at host organizations with the state providing a grant up to $20,000 to help cover wages. 

The Office of Water Emergency Response and Cybersecurity is offering multiple Cybersecurity training webinars this summer! These webinars include a Water Cybersecurity Assessment tool training and a Cybersecurity Procurement Checklist tool training.

Water utilities, local governments, and drinking water professionals have access to a wide range of free training opportunities through the U.S. Environmental Protection Agency (EPA). These seminars, webinars, and workshops are designed to help water sector leaders stay informed on regulatory requirements, cybersecurity, resilience planning, emergency response, and emerging drinking water challenges.