In its FY 2026 budget, Ohio quietly folded in a sweeping cybersecurity mandate that will require every “political subdivision” to have a cybersecurity program that aligns with recognized industry frameworks and adopt strict new rules around ransomware response by September 29, 2025. Below is a practical roadmap for municipal counsel, administrators, and IT leads who …