Over the past few weeks, city councils across Lake County have been passing policies most residents never noticed. Mentor adopted one. Perry and North Perry both passed theirs in June. Behind them sit Painesville, Chardon, Willoughby, and every other city, village, and township in Ohio — all racing to comply with House Bill 96, the state law requiring every political subdivision to adopt a formal cybersecurity program.
If you run a business in Lake County, this law doesn't directly apply to you. But it should get your attention — because the threat model that forced the state to act applies to your business too.
What HB 96 Actually Requires
Ohio House Bill 96 (codified as R.C. 9.64, effective September 30, 2025) requires every political subdivision — counties, cities, villages, townships — to adopt a cybersecurity program that safeguards the entity's data and IT resources. The rules include some smart fundamentals:
- Incident reporting. Cyber incidents must be reported to the state's Ohio Cyber Integration Center within seven days, and to the Auditor of Office within thirty.
- Ransomware payment limits. In communities like Perry and North Perry, paying a ransom requires a documented council resolution — an intentional slowdown to prevent panic payments.
- Mandatory awareness training. Every employee, contractor, and agent with system access must receive cybersecurity awareness training.
- A designated point of contact. Someone specific owns cybersecurity — it's nobody's job is no longer an option.
Notice what's on that list: incident response, ransomware policy, employee training, and clear accountability. That's not government overreach. That's the same baseline every private business should have.
The Local Threat Is Real
This law wasn't passed in a vacuum. Ohio municipalities — including several in Northeast Ohio — have been hit with ransomware attacks that locked up police records, utility billing, and payroll. The same criminals targeting city hall don't check whether your server belongs to a government or to a 30-person company in Willoughby. If anything, small businesses are easier marks: thinner defenses, less training, no incident plan.
When the Lake County Cybersecurity Committee meets in Painesville to review the county's program, the risk they're managing — ransomware, phishing, business email compromise — is the exact risk sitting in your office right now.
Your Business Version of HB 96
You don't need a council resolution to adopt the same discipline. Here's what a private-sector version looks like for a Lake County small business:
Write an incident response plan. If you got hit tonight, who do you call first? What gets disconnected? Who decides about paying? Sixty minutes of planning now beats sixty hours of panic later.
Train your people. Nearly every breach we investigate starts with one clicked link. Short, regular awareness training is the cheapest security control you will ever buy.
Name an owner. If nobody owns cybersecurity in your business, nobody is patching, nobody is reviewing alerts, and nobody is checking that backups actually work.
Get an outside assessment. The counties use committees and external reviews. You can get the same reality check with a professional assessment of your network, backups, and defenses.
For Businesses in Painesville, Chardon, and Beyond
Cybersecurity compliance conversations are happening at 105 Main Street in Painesville and in municipal offices across Chardon, Mentor, Perry, and Willoughby. Your business doesn't have a legislative deadline — but your bank, your insurer, and your biggest customers are all quietly applying the same pressure.
At Prosen Consulting, we help small businesses across Lake County build exactly what HB 96 asks of local governments: a real security program, tested backups, trained employees, and someone accountable when something goes wrong. We're local — based right in Mentor — and we speak plain English, not compliance jargon.
Call 216-867-0692 or visit prosenconsulting.com/consultation to schedule a free consultation. Let's make sure your business is ready before the day Ohio's next headline is about a private company.