Auditor asks council to adopt updated cybersecurity policy aligning with state guidance

The auditor's office requested that council amend ordinance 0110-25 to incorporate Cybersecurity Policy Revision 1.2, updated June 2, 2026. Auditor Thomas said the proposed revisions align city policy with items state auditors will review — including network and device security, employee training, password/access controls, multifactor authentication, incident reporting/response and ransomware planning.

"We're just getting this in line with what the state auditors are looking for," Auditor Thomas said, adding the update reflects topics auditors have highlighted during recent reviews. Committee members raised no substantive objections and agreed to move the update toward first reading so formal ordinance language can be prepared.