Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
North Olmsted to document citywide cybersecurity program ahead of Jan. 1, 2026 state deadline
Summary
Finance Director Copfer told the Sept. 16 council meeting that Ohio House Bill 96 requires municipalities to adopt a cybersecurity program by Jan. 1, 2026; the city is preparing a documented plan that will follow NIST best practices and will be exempt from public-records disclosure, with IT Administrator Eric Lundberg leading implementation.
Finance Director Copfer briefed the council on state requirements and the city92s response during the Sept. 16 meeting.
Copfer said Ohio House Bill 96 requires all cities and counties to adopt a cybersecurity program by Jan. 1, 2026, as part of a broader disaster-recovery framework. She described core elements the program should document, including risk identification, impact assessment, threat-detection mechanisms, incident-response processes, employee training, and notice requirements to the Ohio Department of Homeland Security and the Ohio Auditor of State.
Copfer said the administration, led by IT Administrator Eric Lundberg, is working to have a documented cybersecurity program in place by the state deadline. She also stated the city92s documented plan is exempt from public-records requirements because disclosing operational details could aid malicious actors.
Councilmembers were told the city has already implemented some technical safeguards and that documenting the program will make those measures part of a formal plan. No vote or formal action was recorded; Copfer framed the report as an administrative update and compliance step ahead of the statutory deadline.
