Council moves to shield vendor identities, citing security concerns
The Clarksville City Council is weighing a resolution that would allow the city to keep the names of certain cybersecurity vendors out of public records, saying disclosure could reveal vulnerabilities in municipal information systems.
The proposed measure, discussed by the council this month and advanced by the Finance Committee, would apply to companies that provide services and products to protect the city’s electronic information processing, telecommunications and data storage systems. Under the plan, the council could vote to treat vendor identities as confidential under exceptions to the Tennessee Public Records Act.
City officials told council members the intent is to limit the amount of technical detail available publicly about what software, hardware or services the city uses to defend its networks and data. Supporters say hiding vendor names and specific equipment brands would make it harder for malicious actors to map the city’s defenses and exploit weak points.
“That is beneficial to us because when hackers and different individuals are able to get that information, they can find easier ways to be able to find the holes to be able to get into our system,” said Stacey Streetman at an Aug. 27 executive session of the council.
Transparency trade-offs and legal framework
State law generally makes public records available for inspection, but it contains exceptions that allow governing bodies to designate certain records confidential. The resolution points to that framework as the legal basis for withholding vendor identities when the council determines disclosure would threaten cybersecurity.
Opponents of similar measures elsewhere have argued that redacting vendor names can limit public oversight of procurement decisions and make it harder for taxpayers to know how public funds are used. Supporters counter that revealing technical specifics—such as exact models or brands—can create security risks that outweigh those transparency concerns.
How the proposal would work in practice
The Finance Committee approved the resolution before it was brought to the full council. During discussion, city staff said the measure would allow them to redact where the city is buying equipment from and the exact brand of equipment purchased.
- Scope: Vendors supplying cybersecurity and related protective services for municipal IT and telecom systems.
- Mechanism: City Council vote to designate vendor identity confidential under state law exceptions.
- Rationale: Reduce exposure of potential weaknesses in city information systems and infrastructure.
| Area | What would be protected |
|---|---|
| Electronic information processing | Vendor names, specific brands and equipment sources |
| Telecommunications | Vendor identities and procurement details |
| Data storage systems | Suppliers and specific product information |
The resolution was discussed in an Aug. 27 executive session of the City Council. The proposal states the city uses vendors to protect multiple elements of its information infrastructure, and that releasing their identities could create opportunities for attackers to discover and exploit weaknesses.
Local implications
If adopted, the policy would change what residents and the press can review about the city’s cybersecurity purchases and contracts. Clarksville taxpayers would still see that the city is contracting for cybersecurity services, but details about which companies are contracted and the exact equipment purchased could be redacted from public records when the council votes confidentiality.
That approach mirrors actions taken by other local governments seeking to balance transparency with security. How the council chooses to apply the shield — whether broadly or narrowly and under what criteria — will determine whether residents gain assurance of stronger defenses or lose some visibility into procurement decisions.
The resolution also references the city’s budgeting and procurement processes for cybersecurity, but does not disclose fiscal figures in the materials presented to the council this month.
The City Council is expected to continue discussion of the measure at upcoming meetings as members weigh the competing goals of protecting municipal systems and preserving public access to records about government spending.
