Council introduced cybersecurity program resolution citing new state requirements

City staff introduced Resolution 3892 for first reading Monday, a measure that would adopt a citywide cybersecurity program aligning municipal policies with recently enacted state requirements and established cybersecurity frameworks.

Municipal Administrator Ms. Tredder said she would introduce staff comments and asked Martha (city IT staff) to present details. Martha told council that the state’s appropriations bill and the recently passed House Bill 96 include new requirements for political subdivisions to adopt cybersecurity policies and procedures and require approval by the legislative body. Martha said the proposed program is intended to be consistent with "generally accepted best practices" such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework and the Center for Internet Security (CIS) best practices and to protect information about city operations. She also noted carve-outs in Ohio public records law that exclude certain security-related information from disclosure.

No final action was taken on Resolution 3892 at this meeting; the measure was introduced for first reading alongside two other first-reading resolutions (Resolution 3891 on tax levies and Resolution 3893 to authorize ODOT grant applications). Martha invited questions and offered to "marginally answer" inquiries, and council did not request further clarification during the meeting.