Yellow Springs council adopts cybersecurity policy after state mandate

The Village of Yellow Springs council on June 25 adopted a resolution establishing a cybersecurity policy and program in accordance with Ohio Revised Code 9.64, council members said.

Village Manager Johnny Burns told the council he could not discuss the policy text for cyber security reasons but said the change is mandated by recent state legislation and will increase the village’s costs. "For cyber security reasons, I can't discuss the policy or the program, but I will say this. Um, it will add to the budget," Burns said.

The resolution was read by title only at the special meeting and moved and seconded. Burns told the council that under the legislation (referred to in the meeting as House Bill 96) municipalities face staggered deadlines: cities by Jan. 1 and villages by July 1, and that failing to meet the requirement could affect funding. He said the village would likely return with supplemental budget requests to cover implementation costs.

Council members approved the resolution by voice vote; the transcript records members answering "I" when asked for those in favor and no opposition was recorded. The transcript does not identify the motion’s mover and seconder by name.

Burns also stated that the policy document itself is not a public record for security reasons and therefore cannot be shared publicly. The action allows staff to take the next administrative steps to implement the program and to bring follow-up budget items to council for approval.

The meeting lasted only a few minutes; council moved to adjourn after the vote.