New cybersecurity standards for local governments under Amended Substitute Ohio House Bill 96 are bolstering the mission of the Ohio Environmental Protection Agency (Ohio EPA) to ensure safe drinking water and properly treated wastewater. The new law requires municipalities to adopt a cybersecurity program that safeguards their data and IT resources.
The program is consistent with generally accepted best practices for cybersecurity, such as those from the National Institute of Standards & Technology Cybersecurity Framework and the Center for Internet Security. Components include strongly recommended cybersecurity training, new ransomware payment requirements, and cyber incident reporting requirements.
The Ohio Cyber Integration Center, the Ohio Persistent Cyber Initiative, and the Ohio Cyber Reserves will provide assistance to local governments in transitioning to the new standards and assessing cyber risk.
For more information, see Ohio EPA’s cybersecurity webpage.
