Explanation
BACKGROUND:
This ordinance authorizes the Director of the Department of Technology to enter into an agreement with SecureWorks, Inc., for managed technology security services. DoT requires services from a managed security provider in order to comply with federal and state regulatory requirements. These requirements include IRS tax information security guidelines, federal information processing standards, payment card industry data security standards, and the Health Information Portability and Accountability Act (HIPPA). Complying with these regulations requires advanced expertise and tools not available with current staff and systems.
To procure these systems and services, an Invitation to Bid (ITB) (SA003789) was published in December 2010. The solicitation received three offers to provide managed security services and tools for one year from the date of a purchase order certified by the Columbus City Auditor's Office. SecureWorks was the lowest, responsive and responsible, and best bidder, offering the needed systems and services at a cost of $96,739.02.
SecureWorks will provide the following services as part of this one year agreement: 24x7x365 management of security devices; real-time monitoring, analysis, and response to security events detected on security devices, network assets, servers, databases, and applications; and managed log collection, retention, storage, and reporting to satisfy security and compliance requirements. The SecureWorks services will enable the City to better address technology security issues with one turnkey solution by providing qualified, always-available resources; and a tool to perform reporting functions that prove the City satisfies regulatory requirements.
Resources for this needed service were not included as part of the 2011 budget because DoT did not become aware of the need until after the 2011 budget had already been submitted. Consequently, it has taken some time to adjust the 2011 budget to accommodate this service, and an award for this contract has been delayed. As a result, the SecureWorks offer under the Invitation to Bid will expire June 20, 2011. SecureWorks has agreed to extend their offer through July 15, 2011. Given the amendment to the bid offer, this ordinance requests a waiver of competitive bidding requirements of Columbus City Code, in accordance with section 329. This ordinance requests approval of the services provided by SecureWorks, Inc. and to waive the competitive bidding provisions of the Columbus City Code 329.06.
FISCAL IMPACT:
This request was not originally included as part of the 2011 Department of Technology budget. The funds for this purchase in the amount of $96,739.02 are available within the Department of Technology, Information Services Division, Internal Services Fund as a result of additional cost savings;(expenditures lower than budget) and/or cancellations from other Department of Technology contract agreements no longer needed.
EMERGENCY:
Emergency action is requested to expedite authorization of this contract in order to initiate services from the supplier at the prices proposed.
CONTRACT COMPLIANCE:
Vendor Name: SecureWorks, Inc. C.C.#/FID#: 26 - 2032356 Expiration Date: 5/5/2013
Title
To authorize the Director of the Department of Technology to enter into contract with SecureWorks, Inc. for managed technology security services. DoT requires services from a managed security provider in order to comply with federal and state regulatory requirements; to waive the competitive bidding provisions of Columbus City Code; to authorize the expenditure of $96,739.02 from the Information Services Division, internal service fund; and to declare an emergency. ($96,739.02)
Body
WHEREAS, this legislation authorizes the Director of the Department of Technology to enter into an agreement with SecureWorks, Inc., for managed technology security services; and
WHEREAS, the Department of Technology (DoT) requires services from a managed security provider in order to comply with federal and state regulatory requirements; these requirements include IRS tax information security guidelines, federal information processing standards, payment card industry data security standards, and the Health Information Portability and Accountability Act (HIPPA); and
WHEREAS, an Invitation to Bid (ITB) (SA003789) was published in December 2010 and is due to expire June 20, 2011 and the vendor (SecureWorks, Inc. - lowest bidder) has agreed to extend the pricing until July 15, 2011; and
WHEREAS, the contracted services coverage period is twelve months from the date of a certified purchase order issued from the City Auditor's Office, in the total amount of $96,739.02; and
WHEREAS, this ordinance requests approval of the services provided by SecureWorks, Inc., and to waive the competitive bidding provisions of Columbus City Code, Section 329.06; as it has been determined that SecureWorks, Inc. will enter into a contract with the Department of Technology; and
WHEREAS, an emergency exists in the usual daily operation of the Department of Technology in that it is immediately necessary for the Director of the Department of Technology to enter into contract with SecureWorks, Inc. for managed technology security services and to authorize this expenditure or so much thereof as required, thereby preserving the public health, peace, property, safety, and welfare; now, therefore:
BE IT ORDAINED BY THE COUNCIL OF THE CITY OF COLUMBUS:
SECTION 1: That the Director of the Department of Technology be and is hereby authorized to enter into contract with SecureWorks, Inc. for managed technology security services, with a coverage period of twelve months from the date of a certified purchase order issued from the City Auditor's Office, in the total amount of $96,739.02.
SECTION 2: That the expenditure of $96,739.02 or so much thereof as may be necessary is hereby authorized to be expended from:
Div.: 47-02|Fund: 514| Subfund 001|OCA Code: 472415|Obj. Level 1: 03|Obj. Level 3: 3336|Amount: $96,739.02
SECTION 3: That the City Auditor is authorized to make any accounting changes to revise the funding source for all contracts or contract modifications associated with this ordinance.
SECTION 4: That this ordinance authorizes a contract between SecureWorks, Inc. and the Department of Technology, on behalf of the City of Columbus, and to waive the competitive bidding provisions of Columbus City Code, Section 329.06.
SECTION 5: That for the reasons stated in the preamble hereto, which is hereby made a part hereof, this ordinance is hereby declared to be an emergency measure and shall take effect and be in force from and after its passage and approval by the Mayor, or ten days after passage if the Mayor neither approves nor vetoes the same.