Commercial Point council approves cybersecurity ordinance and security-assessment contract

The Village of Commercial Point council on May 25 moved to put the village under a formal cybersecurity framework and to hire a private firm to assess and bring village systems into compliance.

At a special meeting, councilors advanced ordinance 2026-16, described by staff as an ordinance to establish comprehensive cybersecurity standards for village systems to satisfy a state rule that requires subdivisions to adopt cybersecurity defenses (counties and cities earlier, villages by July 1). Councilors said the measure is intended to ensure the village can report cybersecurity incidents within the timeframes required by state guidance and to provide staff training and minimum technical controls.

Council members waived further readings and approved the ordinance by roll call. A staff presenter noted that water and wastewater systems may be subject to a different, stricter federal-state pathway (noted in the record as CISA/critical-infrastructure guidance) that can include a 24-hour reporting obligation; the ordinance targets village administrative systems and records.

On a related item, council approved on second reading resolution 16-2026, authorizing the mayor to enter a contract with New Era Technology to perform a security assessment and related work for the village. The contract authorization passed by roll call with a majority in favor and one recorded no vote.

Council members and staff said the steps are intended to meet the state timeline and to build internal capacity for cybersecurity work. The council adjourned after completing the listed legislation.