Strengthening City it through Trust, Discipline and Operational...
govciooutlookeurope

City of Bryan, Texas

Strengthening City it through Trust, Discipline and Operational Resilience

Cray Crouse

Cray Crouse leads public sector IT with a focus on accountability, service reliability and disciplined execution. With more than 20 years of experience managing 24x7, mission-critical technology environments, he has stabilized legacy systems, modernized core infrastructure and aligned technology investments with operational outcomes. As CIO of the City of Bryan, he has strengthened cybersecurity, guided capital planning and vendor strategy, and supported departments with resilient technology systems that help serve the community.

In an interview with Government CIO Outlook, Crouse discusses guiding technology strategy in local government. He explains how fiscal discipline, cybersecurity focus and trustcentered leadership strengthen operational resilience while preparing cities to meet growing service demands with limited resources.

Empowering Public Sector Tech through Real-World Expertise

I grew up in West Texas in the 1980s, when computers were more of a curiosity than a career path. My first real exposure was an Atari 400. Later in life, technology stopped being a hobby and became something to make into a profession.

I changed careers into technology in my early 30s and joined the City of Bryan in 2001 as a helpdesk technician, where I was soon promoted to supervisor. After spending about a year with Montgomery County, Texas as a customer service manager, I returned to Bryan as a network administrator and later advanced through several technical and leadership roles before becoming CIO in 2022.

That progression grounded me in the operational realities behind each decision and continues to shape how I lead. I remain an IT technician by trade and by passion, and I’m proud to be part of a strong organization and an exceptional team.

Strengthening Cybersecurity through People and Process

Cybersecurity has been a top priority throughout my tenure as CIO. Our approach follows a defense-in-depth model aligned with standards such as NIST, supported by layered security tools and continuous monitoring. This strategy allows us to strengthen protection while identifying cost-effective ways to improve our overall security posture.

Our most meaningful progress, however, is reflected in how employees respond to real threats. Staff consistently report suspicious activity and follow established procedures, demonstrating the effectiveness of our training efforts.

A key driver of that engagement is our Cyber Shark program. Employees who report phishing attempts receive a shark sticker and certificate, and after collecting ten stickers they earn a branded Shark Award challenge coin. What began as simple recognition has evolved into a friendly competition that reinforces vigilance across the organization. When employees see that reporting threats is recognized and encouraged, security becomes part of the organization’s culture rather than just a technical requirement.

We have also expanded our capabilities through a Part-Time Cyber Analyst Program which brings four to six student and early-career analysts into our security operations environment to assist with threat monitoring and investigation. In addition to strengthening our cybersecurity operations, the initiative helps develop the next generation of public-sector cybersecurity professionals by giving students hands-on experience defending real-world municipal systems.

Cybersecurity culture cannot rely solely on technology. Recognition and engagement programs help build the habits and awareness that strengthen an organization’s overall security posture.

Crisis Response that Validated the Model

Our operating model was tested during the July 2024 CrowdStrike incident, when a faulty software update triggered system failures across organizations worldwide. At approximately 1:45 a.m., servers, desktops and laptops supporting all city departments began failing simultaneously.

Recovery efforts began immediately. Because the issue affected endpoint systems directly, restoration required IT staff to manually interact with each affected device. Teams worked through the early morning hours accessing systems, applying remediation steps and bringing machines back online while prioritizing critical services. As a result of the tireless effort by the IT team, 98 percent of these 1,200 devices we operational before the start of business that day.

Events like this reinforce an important lesson for municipal technology leaders: resilience is built long before a crisis occurs. Disciplined operational practices, clear incident-response roles and well-maintained recovery procedures allowed our teams to respond quickly while maintaining essential city services.

Aligning Technology with Department Priorities

As CIO, my responsibility extends beyond maintaining reliable infrastructure. It includes ensuring that every technology investment supports the operational priorities of the departments delivering services to our community.

That mindset drives a value-focused strategy built on solutions that serve multiple purposes or improve fiscal efficiency, particularly when evaluating technologies such as cloud platforms. We remain conservative where necessary, innovative where effective and always focused on operational impact.

Alignment begins with conversation. In my experience, projects driven solely by IT tend to fail. Instead, we partner directly with departments to understand their needs and provide the foundational technology that supports their work.

When a department proposes a major initiative, such as implementing a new ERP system, we work with stakeholders to build a business case and determine whether the investment delivers measurable value. Quarterly change-management meetings with executive leadership help ensure that priorities remain aligned across the organization.

Each department has a distinct mission, and our role is to enable that mission with secure and reliable systems. We listen to new ideas, evaluate them for cybersecurity, functionality and compliance, and then move forward together.

Our department motto captures that approach: Serve. Innovate. Protect. It is both a guiding principle and the standard we hold ourselves to in every engagement.

Balancing Innovation with Fiscal Responsibility

In local government, innovation has to coexist with accountability. Technology leaders must deliver meaningful improvements while remaining responsible stewards of taxpayer-funded systems. The goal is to ensure that technology investments are both valuable and defensible.

My approach is to pursue innovation only where it delivers clear operational value and long-term sustainability. One example is our deployment of an in-house AI solution. Rather than licensing expensive, one-size-fits-all platforms, we developed an internal toolset that delivers value to staff at a fraction of the expected cost while maintaining control over rapidly evolving AI technologies.

Building credibility around budget management starts with consistency. That means making a deliberate choice not to submit frivolous requests and managing resources responsibly. Over time, that discipline builds trust with city leadership and ensures continued support for meaningful initiatives.

When departments bring forward projects that clearly benefit the organization, we work to align them within existing budget realities rather than pursuing unnecessary expansion. The goal is to demonstrate that we understand the constraints, respect them and allocate resources in ways that deliver measurable impact.

For most cities, the challenge is not a shortage of ideas or new technology; it is the reality that the same small teams responsible for maintaining critical systems are also expected to modernize them. As cities face growing service demands and constrained staffing, the most effective technology strategies will focus on automating routine operations and workflows. By reducing manual effort, local governments can redirect their limited talent toward solving complex problems and delivering the community services that require human judgment.

Guidance for Community-Focused Service

Celebrate adversity. Turn challenges into growth opportunities. Adversity is inherent to public-sector work. When addressed deliberately, challenges strengthen resilience and build the trust needed to sustain operations under pressure. Ultimately, success is measured by whether city services remain accessible, reliable and secure.

Delegation is equally vital for long-term success. Early in my tenure as CIO, I made a deliberate decision to delegate major projects. Doing so required stronger documentation, clearer communication and better feedback loops. It also created opportunities for team members to step into leadership roles by owning outcomes. Several of our current team leads emerged through that process. Today our teams act with autonomy, escalate issues appropriately and move faster because ownership is clearly defined.

I often remind my team that in local government we don’t make a dollar. We make a difference. That principle guides how we build systems, allocate resources and support the people who serve the community of Bryan, Texas.

The articles from these contributors are based on their personal expertise and viewpoints, and do not necessarily reflect the opinions of their employers or affiliated organizations.

Weekly Brief