Beavercreek adopts state‑required cybersecurity program

Beavercreek City Council approved Resolution 25‑35 to adopt a citywide cybersecurity program in order to comply with Ohio Revised Code section 9.64. City staff told council the resolution consolidates existing policies and requires periodic risk assessments and formal procedures for incident response.

Mister Graham (city staff) explained that many of the city’s practices will be brought under a single, documented policy and that smaller local governments often need to rely on contracted services to provide continuous monitoring and incident response. A finance member described the requirement as ‘‘the tip of the iceberg’’ for unfunded mandates that many municipalities face.

Council moved to adopt the resolution and, following a second, approved it by voice vote.

Quote: "This basically allows us to bring all of those policy initiatives under one plan," city staff said while explaining the cybersecurity program.

Ending: The adopted policy will require the city to conduct periodic risk assessments and formalize response procedures; staff noted the need to budget for ongoing compliance and potential contracted services.