W. Va. Code § 5A-6B-5: Exemption from disclosure.

Any information, including, but not limited to, cyber risk assessments, cybersecurity program review, plans of action and milestones, remediation plans, or information indicating the cyber threat, vulnerability, information, or data that may identify or expose potential impacts or risk to agencies or to the state or that could threaten the technology infrastructure critical to government operations or services, public safety, or health is exempt from §29B-1-1 et seq. of this code.