Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Urbana council begins process to adopt municipal cybersecurity program required by state law
Summary
On first reading, Council reviewed Ordinance 4634‑26 to adopt a cybersecurity program consistent with state requirements, discussing inventory, training, reporting and likely responsibility for administration.
Council gave Ordinance 4634‑26 its first reading on June 2, a measure that would adopt a municipal cybersecurity program the city says is required under state law.
Director of Law Mark Feinstein told council a House Bill passed last year requires municipalities to create cybersecurity programs and noted the Ohio Auditor’s office is involved to verify compliance. Feinstein described several required elements: an inventory of information systems, annual policy review, security awareness and training, data classification and protection, an incident response plan, access and password management and physical security measures.
Council members asked about reporting and oversight. Ms. Truelove asked whether the ordinance would require reports; Feinstein said the policy is intended to be a living document and will carry reporting requirements. Mrs. Bean said she was glad multifactor authentication is required and asked who would be the responsible person; Feinstein said that responsibility would probably fall to the Director of Administration or to the city's IT staff and said the city would use both state and local training resources.
Feinstein noted the ordinance requires three readings because it establishes a permanent program. Council did not adopt the ordinance on June 2; the measure will return for further readings.
