Submitted by Frances Rosales, former Republican Vice Chair of the Rutherford County Board of Education –
In November 2024, while I was serving as Vice Chair of the Rutherford County Board of Education, our school district experienced a cyberattack that put our systems and sensitive data at risk. We had no choice but to hire an outside cybersecurity firm, costing taxpayers hundreds of thousands of dollars. Fortunately, the attack happened during the holidays, allowing our IT team to work around the clock without closing schools. Their dedication ensured students returned from winter break on schedule. That experience opened my eyes to just how vulnerable our schools are and how costly it has become to protect the technology we depend on every day.
Technology is no longer a luxury in education. It is a necessity. Students must develop technology skills, and teachers must adapt to an ever-changing digital world. But all of this comes at a price. School districts spend more taxpayer dollars every year on software, equipment, and cybersecurity. What concerns me most is our growing dependence on a single technology provider in a market where competition is limited. With fewer alternatives, schools lose bargaining power and face rising costs, often diverting taxpayer dollars from other educational priorities just to keep up with product updates and technological advancements.
Our schools aren’t alone. Businesses, state agencies, and local governments across Tennessee face similar challenges. One thing I’ve learned from talking with parents and business owners is that you never want one supplier controlling your entire operation. Without a backup plan, one failure can bring everything to a standstill. When one company dominates the market, who is really calling the shots—the customers or the provider? And who is accountable for protecting our data?
Our dependence developed gradually because it seemed convenient. Purchase Microsoft’s Office software, and cloud storage comes with it. Add an AI assistant, and before long, one company handles everything: email, documents, video calls, data storage, and artificial intelligence.
The problem begins when practical alternatives disappear. Without competition, companies face less pressure to keep prices affordable. Bundled services also make it difficult to replace one product without disrupting everything else.
This isn’t hypothetical. Microsoft increased subscription prices for families and individuals last year, incorporating AI tools many customers never requested. Additional increases have raised concerns about affordability and consumer choice.
Rutherford County Schools contracts with Microsoft. When Microsoft stopped supporting some of our older hardware, we had to replace devices. To control costs, we limited the number available in elementary classrooms. Yet our children must learn technology skills, so opting out isn’t an option. From our district’s perspective, Microsoft’s market dominance leaves us with limited choices.
One would hope relying on a single technology provider would make systems more secure. Unfortunately, that isn’t necessarily true.
In January of last year, Microsoft disclosed a software vulnerability that potentially exposed numerous state and local government systems to cyberattacks. This September, three major AI companies experienced disruptions within minutes of one another because they relied on Microsoft’s cloud infrastructure.
Different scenarios, but the same concern: Too many critical systems depend on one company, often without adequate backup plans.
Since 2024, the Federal Trade Commission (FTC) has been investigating Microsoft, examining whether its licensing and bundling practices unfairly limit competition in cloud computing and artificial intelligence.
Tennessee cannot address this issue alone, nor can an individual school district. This past year, the Trump administration’s FTC has increased scrutiny of Microsoft’s business practices. That investigation must be completed thoroughly before costs climb further and more Tennesseans are placed at risk.
Rutherford County Schools responded to its cyberattack and kept schools operating. Sumner County Schools also experienced a cybersecurity incident this year, forcing the district to move its first day of school from August 4 to August 10 after discovering unauthorized network access.
But what happens to smaller, less-funded districts without the financial resources, personnel, or technical capacity to respond? What about private schools, charter schools, court systems, and local governments across Tennessee?
Can they afford the next cyberattack? And how much longer can taxpayers bear the financial burden of our growing dependence on technology companies when there are no other alternatives?
About the Author:Frances Rosales represented Zone 7 on the Rutherford County Board of Education from 2022 to 2026, including a term as vice chair.
No Backup Plan: The Hidden Cost Of Depending On Microsoft (Op-Ed By Frances Rosales)
No Backup Plan: The Hidden Cost Of Depending On Microsoft (Op-Ed By Frances Rosales)
Image Credit: Canva.
Submitted by Frances Rosales, former Republican Vice Chair of the Rutherford County Board of Education –
In November 2024, while I was serving as Vice Chair of the Rutherford County Board of Education, our school district experienced a cyberattack that put our systems and sensitive data at risk. We had no choice but to hire an outside cybersecurity firm, costing taxpayers hundreds of thousands of dollars. Fortunately, the attack happened during the holidays, allowing our IT team to work around the clock without closing schools. Their dedication ensured students returned from winter break on schedule. That experience opened my eyes to just how vulnerable our schools are and how costly it has become to protect the technology we depend on every day.
Technology is no longer a luxury in education. It is a necessity. Students must develop technology skills, and teachers must adapt to an ever-changing digital world. But all of this comes at a price. School districts spend more taxpayer dollars every year on software, equipment, and cybersecurity. What concerns me most is our growing dependence on a single technology provider in a market where competition is limited. With fewer alternatives, schools lose bargaining power and face rising costs, often diverting taxpayer dollars from other educational priorities just to keep up with product updates and technological advancements.
Our schools aren’t alone. Businesses, state agencies, and local governments across Tennessee face similar challenges. One thing I’ve learned from talking with parents and business owners is that you never want one supplier controlling your entire operation. Without a backup plan, one failure can bring everything to a standstill. When one company dominates the market, who is really calling the shots—the customers or the provider? And who is accountable for protecting our data?
Our dependence developed gradually because it seemed convenient. Purchase Microsoft’s Office software, and cloud storage comes with it. Add an AI assistant, and before long, one company handles everything: email, documents, video calls, data storage, and artificial intelligence.
The problem begins when practical alternatives disappear. Without competition, companies face less pressure to keep prices affordable. Bundled services also make it difficult to replace one product without disrupting everything else.
This isn’t hypothetical. Microsoft increased subscription prices for families and individuals last year, incorporating AI tools many customers never requested. Additional increases have raised concerns about affordability and consumer choice.
Rutherford County Schools contracts with Microsoft. When Microsoft stopped supporting some of our older hardware, we had to replace devices. To control costs, we limited the number available in elementary classrooms. Yet our children must learn technology skills, so opting out isn’t an option. From our district’s perspective, Microsoft’s market dominance leaves us with limited choices.
One would hope relying on a single technology provider would make systems more secure. Unfortunately, that isn’t necessarily true.
In January of last year, Microsoft disclosed a software vulnerability that potentially exposed numerous state and local government systems to cyberattacks. This September, three major AI companies experienced disruptions within minutes of one another because they relied on Microsoft’s cloud infrastructure.
Different scenarios, but the same concern: Too many critical systems depend on one company, often without adequate backup plans.
Since 2024, the Federal Trade Commission (FTC) has been investigating Microsoft, examining whether its licensing and bundling practices unfairly limit competition in cloud computing and artificial intelligence.
Tennessee cannot address this issue alone, nor can an individual school district. This past year, the Trump administration’s FTC has increased scrutiny of Microsoft’s business practices. That investigation must be completed thoroughly before costs climb further and more Tennesseans are placed at risk.
Rutherford County Schools responded to its cyberattack and kept schools operating. Sumner County Schools also experienced a cybersecurity incident this year, forcing the district to move its first day of school from August 4 to August 10 after discovering unauthorized network access.
But what happens to smaller, less-funded districts without the financial resources, personnel, or technical capacity to respond? What about private schools, charter schools, court systems, and local governments across Tennessee?
Can they afford the next cyberattack? And how much longer can taxpayers bear the financial burden of our growing dependence on technology companies when there are no other alternatives?
About the Author: Frances Rosales represented Zone 7 on the Rutherford County Board of Education from 2022 to 2026, including a term as vice chair.