Town to move Cityworks to hosted platform after security lapse; council also briefed on grant-funded multi-factor authentication purchase

IT staff told the council the town intends to move its Cityworks asset-management software from an on‑site installation to the vendor-hosted platform to address security and operational concerns.

Security rationale: A staff member said a security vulnerability in February was resolved quickly on the vendor's hosted system but that on-site customers experienced delays in receiving the patch. "From a security perspective, the hosting does make sense," the staff member said, explaining that the vendor addressed the vulnerability on its hosted site within hours but took more than a week to deliver the patch to the town's on‑site instance.

Costs and configuration: IT staff said the hosted option should be less expensive than maintaining the on‑site deployment over time and will require configuration work. Staff said they will return in May with a request for funds to cover configuration services from KCI, the firm that previously worked on system setup.

Multi-factor authentication: Council members were also briefed on a grant-funded multi‑factor authentication (MFA) project. IT staff reported bids were received and recommended contracting with Waypoint Business Solutions to provide tokens and implementation services to fulfill MFA requirements tied to the grant.

Next steps: The council directed staff to place contract authorizations for the Cityworks hosting migration and the MFA procurement on the May agenda for formal approval.