Ohio’s Cyber Law for Local Governments: 5 Steps Over 75 Days to Meet the September 29 Deadline

In its FY 2026 budget, Ohio quietly folded in a sweeping cybersecurity mandate that will require every “political subdivision” to have a cybersecurity program that aligns with recognized industry frameworks and adopt strict new rules around ransomware response by September 29, 2025. Below is a practical roadmap for municipal counsel, administrators, and IT leads who …