Lifetime Citizen Portal Access — AI Briefings, Alerts & Unlimited Follows
IT director flags 146% rise in subscription costs, warns of cybersecurity and cloud budget pressures
Loading...
Summary
IT Director Annie Dove told the council that subscription and cloud costs have grown substantially (she cited a 146% increase over several years), described recent CISA cybersecurity assessments, proposed a $100,000 capital ask for security/access control and identified possible ERP cloud migration costs (vendor estimates discussed: implementation >$600,000; recurring ~$250,000).
Annie Dove, director of the Office of Information Technology (DoverNet), walked the Council through the FY2027 proposed IT budget and operational priorities on March 4, highlighting growing subscription costs, cybersecurity readiness and long-term enterprise planning.
Dove said the department is an internal service fund that charges municipal departments for PC-replacement and IT support and that subscription and cloud-based licensing has increased markedly: she cited a 146% rise in subscription-related spending over recent years. She said part of the increase is due to shifting to managed cloud and security services and that some vendors are moving to cloud-only models.
The director described two recent cybersecurity assessments conducted with CISA and the state partner — one on the business network and a second for the SCADA/utilities environment — and recommended investments including automated security-awareness training and managed switching for utility infrastructure. Dove also proposed a modest membership in MS-ISAC (about $5,000) for incident information-sharing and added a capital item for security and access-control rollout across municipal buildings.
On larger enterprise systems, Dove discussed a potential ERP migration as an option rather than a firm plan. She briefed the council on preliminary vendor figures: an estimated implementation cost over $600,000 and an illustrative new recurring annual cost in the ballpark of $250,000. She recommended a Lean process and lean-team review before any definitive move.
Councilors raised questions about on-premises vs. cloud splits (Dove gave a ballpark of about 50/50), whether subscription increases are predatory vendor behavior or security needs, and how the city verifies vendors’ encryption, data residency and contractual cybersecurity commitments. Dove said the city uses vendor cybersecurity agreements that require encryption in transit and at rest and follows NIST-aligned practices when negotiating with providers.
The presentation did not result in an immediate vote; councilors asked staff to return with more detail as budget hearings progress.
