Fayette County adopts cybersecurity program required by House Bill 96

The Fayette County Board of Commissioners voted Oct. 6 to adopt a county information technology cybersecurity program prepared by county IT staff to comply with House Bill 96 and Ohio Rev. Code § 9.64.

The resolution states the program "is effective immediately" and that records, documents or reports related to the cybersecurity program and framework, and reports of a cybersecurity incident or ransomware incident are not public records under ORC § 9.64. It also references the statute's protection for records that identify cybersecurity-related software, hardware, goods or services being considered or used by the political subdivision.

The minutes say legal counsel reviewed the document for compliance with the statute. The motion to adopt the program was moved by Commissioner Donald L. Fleak, seconded by Commissioner James D. Garland, and carried on a unanimous roll call by Commissioners Tony Anderson, Garland and Fleak.

The program will be filed with the Office of the Commissioners and implemented by the county Information Technology staff. The minutes note the purpose of the program is to protect availability, confidentiality and integrity of county systems and data. The board recorded the adoption without additional public discussion noted in the minutes.