Maine Revised Statutes Title 5. Administrative Procedures and Services § 2022. Chief Information Officer to establish lists

1. List of prohibited companies. A list of companies, including foreign adversary business entities, that pose a national security risk or a risk to the security and safety of persons of the United States. The list must include, but is not limited to, all companies identified by statute, regulation or official guidance from the United States Department of Commerce, the Federal Communications Commission, the United States Department of Homeland Security or any other appropriate federal agency as posing a national security risk or a risk to the security and safety of persons of the United States; and

2. List of prohibited information and communications technology and services. A list of information and communications technology and services that pose a national security risk or a risk to the security and safety of persons of the United States. The list must include, but is not limited to, all information and communications technology and services identified by statute, regulation or official guidance from the United States Department of Commerce, the Federal Communications Commission, the United States Department of Homeland Security or any other appropriate federal agency as posing a national security risk or a risk to the security and safety of persons of the United States.

The lists must be published on the publicly accessible website of the Department of Administrative and Financial Services, Office of Information Technology and updated at least annually.