Carlisle council adopts cybersecurity resolution required by Ohio House Bill 96

Carlisle City Council unanimously approved Resolution 26-25 on Nov. 25, directing staff to implement cybersecurity measures required by Ohio House Bill 96 and to develop a comprehensive cybersecurity program for the city.

Acting City Manager Alaina Geres told council the resolution implements state-required cybersecurity steps and that the city is working with its IT contractor to complete the program. When Councilmember Jason Faulkner asked whether the council would be permitted to review the plan, Geres responded that the plan "is not a public record" and therefore has not been provided to council.

Council voted first to suspend the rule requiring three separate readings and allow a single reading by title. The motion to suspend was made by Councilmember Chris Stivers and seconded by Councilmember Debbie Kemper; the motion passed on a 6–0 roll call.

After the suspension, Councilmember Kemper moved to approve Resolution 26-25; Councilmember Michael Kilpatrick seconded. The resolution passed on a 6–0 roll call vote.

The resolution text authorizes the implementation of cybersecurity measures pursuant to Ohio House Bill 96 and directs staff to develop a comprehensive cybersecurity program; it also instructs staff to work with the city's contracted IT provider to complete required elements. The minutes state that specific elements of the underlying plan have not been shared because the plan is not a public record.

Next steps: staff will develop the cybersecurity program and work with the IT contractor; the minutes do not specify a timeline for completion or what portions, if any, of the plan will be made available to council or the public.