September 2025 - CORSA-broadcast

CCAO publishes bulletin on cybersecurity program changes
by Frank Hatfield Sept. 30, 2025

Sept. 30, 2025

To view this bulletin in a web browser, click here.<https://ccao.org/aws/CCAO/ctrb/275995/486704/3149782?c=https%3A%2F%2Fccao.o…> [CCAO]<https://ccao.org/aws/CCAO/ctrb/275995/486704/3149782?c=https%3A%2F%2Fccao.o…> CCAO published County Advisory Bulletin 2025-13, County Cybersecurity Programs<https://ccao.org/aws/CCAO/ctrb/275995/486704/3149782?c=https%3A%2F%2Fassoci…>, today. The bulletin outlines several changes made in House Bill 96, the state operating budget, regarding cybersecurity procedures and programs for local governments. HB 96 adds definitions of "cybersecurity incident" and "ransomware incident" to the Revised Code; creates new reporting requirements in the event of an incident; requires all counties and other political subdivisions to implement a cybersecurity program; and requires the legislative authority of the county to formally approve a payment or compliance with a ransom demand in a resolution. If you have questions regarding the new cybersecurity requirements or the CAB, please contact Outreach & Member Engagement Manager Rachel Reedy at rreedy(a)ccao.org<mailto:rreedy@ccao.org> or Research Analyst Nick Ciolli at nciolli(a)ccao.org<mailto:nciolli@ccao.org>. 209 East State St Columbus, Ohio 43215 (614) 221-5627 EMAIL US<mailto:thoverman@ccao.org> [Developed by TCS Software]<https://ccao.org/aws/CCAO/ctrb/275995/486704/3149782?c=http%3A%2F%2Fwww.ass…> [http://associationdatabase.com/aws/CCAO/ebulletin/opened/275995/3149782/0/0] Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

CCAO and CyberOhio to hold cybersecurity program webinar on October 9
by Frank Hatfield Sept. 30, 2025

Sept. 30, 2025

Ohio's new cybersecurity law, codified in R.C. 9.64, requires counties and other political subdivisions to adopt and maintain a formal cybersecurity program. The law also introduces new procedures for reporting cyber incidents, responding to ransomware, and clarifies public records exceptions for cybersecurity-related documents. This webinar, hosted by CyberOhio and the County Commissioners Association of Ohio (CCAO), will walk through what political subdivisions need to know to comply with R.C. 9.64. We'll break down the legal requirements, highlight resources available to help your organization build or strengthen a cyber program, and answer common questions from local officials. Topics will include: * What Ohio Revised Code Section 9.64 requires of political subdivisions * Cyber incident reporting and ransomware response obligations * Public records exceptions for cybersecurity documents * Practical steps to begin or enhance a compliant cyber program * Free resources available through CyberOhio and state partners The webinar does not require registration. The access link (HERE)<https://teams.microsoft.com/l/meetup-join/19%3ameeting_NjU5Zjk3ZDktM2YwYi00…> will be activate on Thursday, October 9 at 2:00 p.m. If you have questions about the webinar link, please contact Lexie Meade, Deputy Director, CyberOhio at Lexie.Meade(a)Governor.Ohio.gov<mailto:Lexie.Meade@Governor.Ohio.gov>. Original posting contained in Counties Current 9-29-25: https://mailchi.mp/ccao/counties-current-09-29-25 Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

Employee Building Evac/Emergency notification
by Jones, Cathy Sept. 22, 2025

Sept. 22, 2025

How do other counties notify employees of emergencies/building closures and evacuations? PA systems, mobile phone notifications, etc? If use a vendor platform, please list who is used. Please and thank you CATHY JONES Director, Risk Management ADA Coordinator Board of Mahoning County Commissioners 21 W Boardman St. Youngstown, OH 44503 Ph. 330-740-2130 Fx. 330-740-2667 cjones(a)mahoningcountyoh.gov<mailto:cjones@mahoningcountyoh.gov> [cid:image001.jpg@01D88596.03FCAFF0]

3 3

County buildings/security
by Jones, Cathy Sept. 22, 2025

Sept. 22, 2025

Apart from the Courthouse and jail, who is in charge of building security, employee access, and decisions on who has access and when? Commissioners? Sheriff? Facilities? Please advise. CATHY JONES Director, Risk Management ADA Coordinator Board of Mahoning County Commissioners 21 W Boardman St. Youngstown, OH 44503 Ph. 330-740-2130 Fx. 330-740-2667 cjones(a)mahoningcountyoh.gov<mailto:cjones@mahoningcountyoh.gov> [cid:image001.jpg@01D88596.03FCAFF0]

8 8

CyberOhio Webinar & HB 96 Resources
by Frank Hatfield Sept. 17, 2025

Sept. 17, 2025

CyberOhio announced that its next cybersecurity webinar "How to Use NIST CSF to Build a Cyber Program" will take place on 9-24-25. CyberOhio also issued a list of HB 96 cybersecurity resource links. Register Now: 9/24/25 CyberOhio Webinar How to Use NIST CSF to Build a Cyber Program Join us on September 24th, 12:30 pm - 1:30 pm for a webinar that walks you through using the NIST Cybersecurity Framework (CSF) as your roadmap to build or enhance a comprehensive cyber program. This session will be especially geared toward local entities building a cyber program to come into compliance with ORC 9.64. What You'll Learn: * The core components of the NIST CSF: Govern, Identify, Protect, Detect, Respond, Recover * How to align these components with your organization's people, processes, and technology * Practical steps & tools to assess current posture and prioritize improvements * Tips for communicating risk and gaining support from leadership Register Here<https://links-2.govdelivery.com/CL0/https:%2F%2Fevents.gcc.teams.microsoft.…> Looking for assistance on HB 96 cybersecurity compliance? Check out the following resources: * ORC Section 9.64 <https://links-2.govdelivery.com/CL0/https:%2F%2Fcodes.ohio.gov%2Fohio-revis…> * CyberOhio HB 96 Resources <https://links-2.govdelivery.com/CL0/https:%2F%2Fcyber.ohio.gov%2Fpriorities…> * Ohio Cyber Integration Center Reporting Guidance <https://links-2.govdelivery.com/CL0/https:%2F%2Fhomelandsecurity.ohio.gov%2…> * Auditor of State Guidance and Resources <https://links-2.govdelivery.com/CL0/https:%2F%2Fohioauditor.gov%2Ffraud%2Fc…> * Auditor of State Bulletin <https://links-2.govdelivery.com/CL0/https:%2F%2Fohioauditor.gov%2Fpublicati…> * NIST CSF 2.0 Resources <https://links-2.govdelivery.com/CL0/https:%2F%2Fwww.nist.gov%2Fcyberframewo…> * Center for Internet Security Controls Resources <https://links-2.govdelivery.com/CL0/https:%2F%2Fwww.cisecurity.org%2Fcontro…> * Ohio Persistent Cyber Improvement (O-PCI) <https://links-2.govdelivery.com/CL0/https:%2F%2Fwww.ohiocyberrangeinstitute…> Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

Maintenance tickets
by Jenny Phelps Sept. 15, 2025

Sept. 15, 2025

Are counties who have been using Facility Dude for maintenance tickets staying with Facility Dude or switching to another platform? If you're continuing to use Facility Dude, are you upgrading? Why/why not? If anybody has switched to another platform, what information can you provide on that, please? Thank you, Jenny Phelps Loss Control Program Coordinator office: 419-774-6318 fax: 419-774-3581 -- CONFIDENTIAL: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

4 4