Explanation
BACKGROUND:
This ordinance authorizes the Director of the Department of Technology to renew an agreement with SecureWorks, Inc., for managed technology security services. The original agreement (EL011963) was authorized by ordinance 0818-2011, passed June 13, 2011. The agreement was most recently renewed by authority of ordinance 1220-2012, passed July 9, 2012, through purchase order EL013343; and subsequently modified by authority of ordinance 2456-2012, passed December 3, 2012, through purchase order EL013766. This renewal will provide service for the period August 26, 2013 through August 25, 2014, at a cost of $168,694.53.
This ordinance also authorizes the Director of the Department of Technology to enter into an agreement with SecureWorks, Inc., for monitored firewall standalone technology security services, in the amount of $10,437.97, with a coverage period of February 8, 2013 through February 7, 2014.
DoT requires services from a managed security provider in order to comply with federal and state regulatory requirements. These requirements include IRS tax information security guidelines, federal information processing standards, payment card industry data security standards, and the Health Information Portability and Accountability Act (HIPPA). Complying with these regulations requires advanced expertise and tools not available with current staff and systems.
As authorized by ordinance 2456-2012, the managed security service provided by SecureWorks was expanded last year, which explains the cost increase for continuing service this year. The additional service includes advanced threat intelligence, providing the City with advanced warning of emerging technology security threats. Also included is firewall monitoring, an expansion of existing network monitoring services from 50 to 150 devices; and an expansion of internal scanning services from 256 IP addresses to 512 IP addresses.
SecureWorks was awarded a contract through their amended offer to solicitation SA003789. That agreement included provisions for annual renewal, subject to mutual agreement and approval of proper City authorities. It is not in the City's best interests to procure this service through competitive procurement, as transitioning to another vendor would entail significant start-up costs already incurred with the existing vendor. As such, this ordinance requests a waiver of competitive bidding requirements of Columbus City Code, in accordance with section 329.27.
FISCAL IMPACT:
In 2011 and 2012, the Department of Technology legislated $96,739.02 and $140,376.32 with SecureWorks, Inc. for managed technology security services. This year (2013), the cost for the renewal of managed technology security services with SecureWorks, Inc. is $168,694.53 and the cost for monitored firewall standalone technology security services at $10,437.97. Funding for these services was budgeted and is available within the Department of Technology, Information Services Division, internal services fund. The aggregate contract total including this renewal is $416,247.84.
EMERGENCY:
Emergency action is requested to expedite authorization of these contracts for critical technology security services.
CONTRACT COMPLIANCE:
Vendor Name: SecureWorks, Inc. C.C.#/FID#: 26 - 2032356 Expiration Date: 4/26/2015
Title
To authorize the Director of the Department of Technology to renew an agreement with SecureWorks, Inc. to provide managed technology security services in order to continue compliance with federal and state regulatory requirements; to authorize the Director of the Department of Technology to enter into an agreement with SecureWorks, Inc., for monitored firewall standalone technology security services; to waive the competitive bidding provisions of Columbus City Code; to authorize the expenditure of $179,132.50 from the Department of Technology, Information Services Division, internal service fund; and to declare an emergency. ($179,132.50)
Body
WHEREAS, this ordinance authorizes the Director of the Department of Technology to renew an agreement with SecureWorks, Inc., for managed technology security services for the period August 26, 2013 through August 25, 2014, at a cost of $168,694.53; and
WHEREAS, this ordinance also authorizes the Director of the Department of Technology to enter into an agreement with SecureWorks, Inc., for monitored firewall standalone technology security services, in the amount of $10,437.97, with a coverage period of February 8, 2013 through February 7, 2014; and
WHEREAS, the Department of Technology (DoT) requires services from a managed security provider in order to comply with federal and state regulatory requirements; these requirements include IRS tax information security guidelines, federal information processing standards, payment card industry data security standards, and the Health Information Portability and Accountability Act (HIPPA); and
WHEREAS, this ordinance requests approval of the services provided by SecureWorks, Inc., and to waive the competitive bidding provisions of Columbus City Code, Section 329; and
WHEREAS, an emergency exists in that it is immediately necessary for the Director of the Department of Technology to renew an agreement with SecureWorks, Inc. for managed technology security services and establish a contract for monitored firewall security seervices, and to authorize this expenditure or so much thereof as required, thereby preserving the public health, peace, property, safety, and welfare; now, therefore:
BE IT ORDAINED BY THE COUNCIL OF THE CITY OF COLUMBUS:
SECTION 1: That the Director of the Department of Technology be and is hereby authorized to renew an agreement with SecureWorks, Inc. for managed technology security services, with an associated coverage term period from August 26, 2013 through August 25, 2014, in the amount of $168,694.53. This ordinance also authorizes the Director of the Department of Technology to enter into an agreement with SecureWorks, Inc., for monitored firewall standalone technology security services, in the amount of $10,437.97, with a coverage period of February 8, 2013 through February 7, 2014. The total amount of funding requested via this ordinance is $179,132.50.
SECTION 2: That the expenditure of $179,132.50 or so much thereof as may be necessary is hereby authorized to be expended from:
Div.: 47-02|Fund: 514| Subfund 001|OCA Code: 472415|Obj. Level 1: 03|Obj. Level 3: 3336|Amount: $168,694.53
Div.: 47-02|Fund: 514| Subfund 001|OCA Code: 472415|Obj. Level 1: 03|Obj. Level 3: 3336|Amount: $10,437.97
SECTION 3: That the City Auditor is authorized to make any accounting changes to revise the funding source for all contracts or contract modifications associated with this ordinance.
SECTION 4: That the funds necessary to carry out the purpose of this ordinance are hereby deemed appropriated, and the City Auditor shall establish such accounting codes as necessary.
SECTION 5: That this ordinance authorizes a renewal agreement between SecureWorks, Inc. and the Department of Technology, on behalf of the City of Columbus, and to waive the competitive bidding provisions of Columbus City Code, Section 329.
SECTION 6: That for the reasons stated in the preamble hereto, which is hereby made a part hereof, this ordinance is hereby declared to be an emergency measure and shall take effect and be in force from and after its passage and approval by the Mayor, or ten days after passage if the Mayor neither approves nor vetoes the same.