Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Sunbury staff to draft cybersecurity policy after state law sets Jan. 1, 2026 enforcement date
Summary
City staff told the Finance Committee Sept. 17 that House Bill 96 and an Auditor of State bulletin require municipalities to adopt a cybersecurity policy by Jan. 1, 2026; staff will draft a policy and return to committee and council for approval and budget requests may follow.
Devin, finance director, told the Sunbury Finance Committee on Sept. 17 that House Bill 96 and Auditor of State Bulletin 2025-007 require the city to adopt and enforce a cybersecurity policy by Jan. 1, 2026.
The requirement matters because the bulletin lists required elements — including definitions for cybersecurity and ransomware incidents and the circumstances under which ransom payment is permitted — and the deadline gives the city a firm compliance date. "It basically requires that all entities of the state of Ohio and cities as we are a city, we are, obligated to do this. We have to enact a cybersecurity policy, and this policy has to be…
Already have an account? Log in
Subscribe to keep reading
Unlock the rest of this article — and every article on Citizen Portal.
- Unlimited articles
- AI-powered breakdowns of topics, speakers, decisions, and budgets
- Instant alerts when your location has a new meeting
- Follow topics and more locations
- 1,000 AI Insights / month, plus AI Chat

