Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Geneva IT lead outlines municipal cybersecurity duties under House Bill 96
Summary
IT staffer Chuck Dowd told council that House Bill 96 requires municipalities to implement cybersecurity testing, ongoing employee training, automated detection of risky remote access and places limits on ransom payments; he said some security specifics cannot be discussed in public.
Chuck Dowd, introduced to the council as the city IT lead, told the City of Geneva council that municipalities now face expanded cybersecurity reporting and compliance requirements under House Bill 96 (as described in the transcript). Dowd said the law requires municipalities to identify and assess cybersecurity risks, run testing, put automation in place to detect suspicious behavior, and maintain continuous employee training programs.
Dowd explained the city monitors remote vendor access and uses automated alerts to flag unusual remote connections so department leads can confirm whether a transaction was authorized. He said those automated systems and training help the city meet auditor expectations and reduce audit findings.
On ransom payments, Dowd said the bill restricts how municipalities may respond to ransomware incidents and advised that the city cannot "arbitrarily just say, yeah, we're gonna pay the ransom to get our data back"; he emphasized staff must follow prescribed protocols. Dowd also noted there are security details he cannot disclose in a public meeting for safety reasons.
Councilmembers asked about phishing-simulation training and whether the city uses government-compliant Office 365 tools and AI features. Dowd said the city runs simulated phishing exercises and that continuous training is in place; he described vendor selection considerations including cost, sustainability and vendor market share.
