Mapleton board adopts CIS cybersecurity framework, cites Ohio House Bill 96

The Mapleton Local School District Board of Education unanimously adopted a resolution on March 9, 2026, designating the Center for Internet Security (CIS) Cybersecurity Framework as the district’s official cybersecurity program framework and directing administration to implement related policies and controls to comply with Ohio House Bill 96. Kyle Gordon moved the resolution; Kathy Goon seconded it, and the vote was 5–0.

The resolution cites the Ohio General Assembly’s enactment of House Bill 96, which requires political subdivisions, including school districts, to establish and maintain a cybersecurity program consistent with generally accepted best practices. The board’s action authorizes administrators to adjust policies and operational practices and requires the Director of Technology to provide an annual report on implementation progress, compliance status, and recommendations for resources or corrective action.

Board members emphasized strengthening protections for sensitive data and improving resilience to cyberattacks, according to the resolution language the board approved. The resolution takes effect immediately upon adoption.

The adoption directs district staff to align procedures and controls with the CIS framework; the minutes do not provide additional details on a timeline for implementation, staffing needs, or estimated costs. Those items were not specified in the meeting record. The district’s prior discussion of cybersecurity and AI policy updates was presented earlier in the meeting by Craig Wentworth, who reviewed new cyber security laws and AI use guidance for the district.