Reporting ownership
Who owns incident reporting, the supporting evidence and the decision to escalate? Is an alternate available?
Indiana Counties · Municipalities · Districts
Cyber readiness for
Indiana local government.
Bring leadership, operations and technology partners into one practical readiness conversation with Lionfish.
Prefer email or phone? info@lionfishcybersecurity.com · 877-732-6772.
For Indiana teams. Please share only business-contact and high-level readiness information—not credentials, vulnerabilities, system diagrams or incident details.
Different responsibilities. Shared community needs.
A town office, a municipal water system and an emergency-service team may have different responsibilities. Clear ownership and coordinated preparation help teams ask the right questions before a disruption.
Discuss how Lionfish’s existing capabilities fit your organization’s priorities. County emergency coordination does not mean a county owns or controls every local utility.
Questions to bring.
Trusted coordination
How will leadership, technology providers and essential-service partners communicate when normal systems are unavailable?
Practical continuity
Which communications, service dependencies and continuity arrangements need to be exercised together?
Separate duties deserve separate checklists.
- Cyber incidents: Indiana IOT guidance requires covered local-government entities to report without unreasonable delay and no later than two business days after discovery, and identify a primary reporter. Do not confuse two business days with 48 hours. Water entities covered by Indiana’s separate water cybersecurity law are excluded from this general reporting section; map their specific duties separately.
- Public funds: SBOA Directive 2026-04 establishes separate immediate reporting for public funds associated with a cybersecurity incident, including payments to a hacker directly or through a third party. It is not authorization to pay.
- Specific information and services: Additional duties may apply to health information, criminal justice information or utility operations. Scope them separately rather than treating every department alike.
Educational context reviewed October 30, 2026; not legal advice. Confirm the full requirements and any exceptions with your counsel and relevant agency. These duties are not a blanket requirement for every local government to obtain NIST, ISO or CMMC certification.
Official resources for your next discussion.
- Indiana IOT: local-government services and incident reporting
- SBOA: State Examiner Directive 2026-04
- IDHS: continuity, recovery and resilience planning
Include municipal or district leadership, operations, relevant emergency-management or fire/EMS partners and technology providers as appropriate. Joint exercises are a preparedness recommendation—not a new legal mandate.
Responsible for a water or wastewater facility? Explore VIGILANT WATER.
Bring the right people into the conversation.
Invite your operations lead, technology partner and accountable decision-maker. Discuss your priorities, the work already underway and whether Lionfish is the right fit for your next step.
Briefing scope and any services are agreed with your team. Training or a briefing does not by itself establish legal compliance, certification or operational safety. Privacy policy.