Committee advances ordinance adopting city cybersecurity program, authorizing emergency actions
Summary
The Budget and Finance Committee voted to give a favorable report to an ordinance that would adopt a municipal cybersecurity program, require reporting to state cyber authorities and authorize the chief technology manager to act during ransomware incidents; the committee moved to suspend rules and advance the measure.
Councilman Wheeler told the Budget and Finance Committee that the ordinance before the panel contains three primary parts: municipal adoption of a cybersecurity program, required incident reporting and a provision allowing the city to adopt an ordinance to pay ransom if a ransomware attack required payout. "We brought this last week," Wheeler said, "there's 3 primary portions to this."
The measure would require the city to report cybersecurity incidents to the Ohio Cybersecurity Integration Center and to the Auditor of State and would authorize the chief technology manager to take appropriate actions, including making required disclosures and declaring an emergency when necessary. Wheeler said the council must pass a version before the end of the year but that the ordinance can be amended in the future.
Chair asked for a motion to suspend the rules and give a favorable report; members moved, seconded and approved the motion by voice vote. The committee advanced the ordinance to the next stage with a favorable report; specific ordinance language and any amendments will be considered by the full council in the next steps.
