North Canton council moves cybersecurity resolution to council agenda; Adnet Plus to present

Member Matheny told the North Canton City Council on Oct. 20 that a resolution would direct the mayor, through the city's managed IT service provider, to set and adopt standard safeguards against cybersecurity threats, and declared the measure an emergency to meet a state deadline.

The measure responds to changes in state law under Ohio Revised Code section 9.64 (House Bill 96) that require municipalities to formalize cybersecurity procedures for risk assessments, incident response training and reporting. Member Matheny said the city has a managed service provider and that the resolution is intended to put required procedures in writing so the city can submit them to the state by Jan. 1.

City staff said the vendor the city uses is Adnet Plus and that Adnet Plus will present its program to council next Monday. Staff described the resolution as largely formalizing protections the city already has in place, while adding a requirement that the legislative body approve any ransomware payment or appropriation in response to a ransom demand, as provided under the state law.

A city staff member also noted that the state is treating the written procedures as exempt from public records law so that security details are not made public. Staff emphasized training and awareness—particularly phishing training for employees—in the discussion. Meeting remarks included a recommendation that employees consult the managed IT provider when they receive suspicious messages.

Council voted to move the resolution onto the council agenda for further consideration; the motion to place it on the agenda passed (mover and seconder not specified; vote: 7 yes, 0 no). The council did not adopt the resolution at this meeting.

Next steps: Adnet Plus will present its program to council next Monday, after which the council will consider the item on the formal council agenda and may schedule readings or a final vote.