header-left
File #: 0719-2014    Version: 1
Type: Ordinance Status: Passed
File created: 3/18/2014 In control: Technology Committee
On agenda: 4/28/2014 Final action: 5/1/2014
Title: To authorize the Director of the Department of Technology to renew and modify an agreement with SecureWorks, Inc. to provide managed technology security services in order to continue compliance with federal and state regulatory requirements; to waive the competitive bidding provisions of Columbus City Code; to authorize the expenditure of $289,213.07 from the Department of Technology, Information Services Division, internal service fund; and to declare an emergency. ($289,213.07)
Attachments: 1. Bid Waiver Form Ord. No. 0719-2014, 2. SecureWorks 2014 Renewal with Log Retention Increase 3 14 14, 3. SecureWorks Additional Log Retention Quote 3-17-14, 4. SecureWorks QSA Security Retainer_1 3-7-14, 5. SecureWorks Web App_Testing_SoW 3-7-14
Explanation

BACKGROUND:
This ordinance authorizes the Director of the Department of Technology to renew and modify an agreement with SecureWorks, Inc., for managed technology security services. The original agreement (EL011963) was authorized by ordinance 0818-2011, passed June 13, 2011. The agreement was most recently renewed and modified by authority of ordinance 1192-2013, passed July 1, 2013, through purchase orders EL014687 and EL014754. This renewal will provide service for the period August 26, 2014 through August 25, 2015, at a cost of $177,865.83.

This ordinance will also authorize a contract modification in the amount of $111,347.24. This cost includes:

· $627.24 which is a net amount of ($2,359.26 actual charge for additional security log retention required to accommodate the addition of Police servers and network minus a credit of $1,732.02 to be applied from purchase order EL014687. This will provide service for the period June 1, 2014 to August 25, 2014. The additional cost (for a full year of service) is $10,098.70, which is reflected in the renewal for the period August 26, 2014 to August 25, 2015.

· $43,200.00 for security consulting services needed to assist the City with Payment Card Industry (PCI) compliance. This will provide service for up to one year from the date of a certified purchase order.

· $67,520.00 for web application security testing, also needed to assist the City with PCI compliance. This will also provide service for up to one year from the date of a certified purchase order.


As neither the incorporation of Police technology nor the need for additional PCI compliance was known at the time of the original agreement, the need for these additional services was not foreseen. As SecureWorks technology and services are already imbedded within the City’s technology infrastructure, it is not in the City’s best interests to procure additional service through alternate procurement methods; doing so with another vendor would...

Click here for full text