W. Va. Code § 5A-6B-5

Any information, including, but not limited to, cyber risk assessments, plans of action and milestones, remediation plans, or information indicating the cyber threat, vulnerability, information or data that may identify or expose potential impacts or risk to agencies or to the state or that could threaten the technology infrastructure critical to government operations and services, public safety or health is exempt from §29B-1-1 et seq. of this code.