Central Alabama Water fast-tracks open-ended IT security contract amid cyber threat concerns

Central Alabama Water fast-tracks open-ended IT security contract amid cyber threat concernsThe utility’s board approved a three-year master service agreement with managed IT provider Element 4 without a finalized budget, as officials cited an urgent need to bolster the system's defenses.

The board approved a three-year agreement with Element 4 for enterprise IT and engineering services, exempt from bidding through a cooperative buying agreement.

Chief Technology Officer Cameron Holley cited urgent 'cybersecurity threats that we face' as the primary driver for expediting the contract.

The task-based master service agreement currently lacks a defined cost, prompting pushback from at least one board member over the approval of 'blank contracts.'

Utility leadership assured the board that specific task orders will remain strictly within the existing overall IT budget.

Central Alabama Water (CAW) has moved to urgently fortify its cybersecurity defenses, approving a three-year master service agreement with managed IT provider Element 4 during its August 10, 2026, board meeting. The agreement, which runs through August 9, 2029, will provide IT-related enterprise professional services and engineering. The procurement was exempt from standard bidding requirements because Element 4 is part of a cooperative buying agreement. Utility leadership stressed the critical timing of the contract. Chief Technology Officer Cameron Holley noted that while CAW has previously used Element 4 for as-needed tasks, formalizing a master service agreement is a necessary step to strengthen the utility's security posture. When pressed by the board on why the contract was being rushed, Holley pointed to the escalating risks facing the sector, citing "the nature of the world in which we live right now in terms of the cybersecurity threats that we face." The CEO echoed these concerns, emphasizing the necessity of creating a "very resilient system" in light of recent news surrounding utility cybersecurity. However, the urgent push sparked debate among board members due to the lack of a defined contract value. Because the agreement is task-based, specific project costs are still being negotiated. One board member challenged the practice of approving the agreement without established numbers, characterizing it as a "blank contract" and poor policy. Leadership defended the approach, assuring the board that all task orders issued under the Element 4 agreement will fall strictly within the already-approved general IT budget. Any requirement to exceed that budget would necessitate returning to the board for further approval. Despite the financial transparency concerns and a dissenting vote, the agreement was approved. In separate administrative action, the board also voted to officially create a General Counsel position for Central Alabama Water, retaining R. Shan Paden for the non-employee role.