Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Fayette County adopts cybersecurity program under Ohio House Bill 96; incident reports exempted from public disclosure
Summary
The Board of Fayette County Commissioners adopted a county cybersecurity program to comply with Ohio Rev. Code § 9.64 (House Bill 96), making the program effective immediately and designating cybersecurity records and incident reports as non-public under the statute.
The Fayette County Board of Commissioners on Oct. 6 adopted a county Information Technology Cybersecurity Program prepared by county IT staff to meet requirements of Ohio House Bill 96 (ORC § 9.64).
The resolution states the program is tailored to Fayette County’s needs, reflects generally accepted industry best practices and is effective immediately. It also directs that records, documents or reports relating to the cybersecurity program and reports of cybersecurity or ransomware incidents are not public records under Ohio Rev. Code § 9.64.
The resolution further notes the statute classifies records that identify cybersecurity-related software, hardware, vendors or project descriptions as security records not subject to disclosure. The board recorded unanimous approval; Commissioners Tony Anderson, James D. Garland and Donald L. Fleak signed the resolution.
The minutes indicate the county’s IT staff prepared the program and legal counsel reviewed it to ensure statutory compliance. No public comment on the cybersecurity resolution is recorded in the minutes.
The resolution does not list detailed technical controls in the minutes; it records adoption of the county program and the statutory confidentiality determinations under ORC § 9.64.
