Is Ohio Senate Bill 220 an Example for the Other 49 States?
ID: 1e7b73a7-db7a-5710-b37f-d953b0d7d72e
STIX ID: report--1e7b73a7-db7a-5710-b37f-d953b0d7d72e
Feed Name: TrustedSec blog
The document analyzes Ohio Senate Bill 220 (effective November 2, 2018), which establishes a voluntary legal safe harbor as an affirmative defense for organizations that implement cybersecurity programs that "reasonably conform" to enumerated standards (NIST CSF/SP 800-171/800-53, CIS Controls, ISO 27000, HIPAA, GLBA, FedRAMP). It highlights ambiguity about what "reasonably conforms" and scope mean in practice and discusses potential complications if states adopt divergent cybersecurity laws.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.