ME LD2092

Updates terminology throughout Maine statutes, replacing "data processing" with "information technology" and adding references to "information security" and "cybersecurity" to reflect modern practices

Adds new statutory definitions for "cyberattack," "cybersecurity," and "information security" to align with existing definitions in Title 37-B

Authorizes the Chief Information Officer to designate authority to others and to procure cybersecurity products or services on a retainer basis to detect, prevent, and respond to cyberattacks

Creates new exceptions to competitive bidding requirements, allowing IT procurement through the U.S. General Services Administration when determined to be in the State's best interest

Expands the Office of Information Technology's mission to include ensuring confidentiality, integrity, and availability of state information systems and establishing cybersecurity standards and policies