Explanation
BACKGROUND:
DoT requires services from a managed security provider in order to comply with federal and state regulatory requirements. These requirements include Payment Card Industry Data Security Standards (PCI DSS), IRS Publication 1075, and the Health Information Portability and Accountability Act (HIPPA). Complying with these regulations requires advanced expertise and tools not available with current staff and systems.
As SecureWorks technology and services are already imbedded within the City’s technology infrastructure, it is not in the City’s best interests to procure additional service through alternate procurement methods; doing so with another vendor would involve significant additional and unnecessary transition costs. Additionally, the City's PCI compliance project started with SecureWorks in 2013. The City worked closely with SecureWorks to achieve PCI compliance in 2014 and wish to leverage SecureWorks' understanding of the City’s environment and PCI compliance efforts to date to ensure the City’s compliance posture
This ordinance authorizes the Director of the Department of Technology to renew and modify an agreement with SecureWorks, Inc., for managed technology security services. The original agreement (EL011963) was authorized by ordinance 0818-2011, passed June 13, 2011. The agreement was most recently renewed and modified by authority of ordinance 1344-2015, passed July 23, 2015, through purchase order EL017481. This renewal will provide service for the period August 26, 2015 through August 25, 2016, at a cost of $264,349.64.
This ordinance also authorizes the Director of the Department of Technology to modify the current contract term period of August 26, 2015 through August 25, 2016 to increase funds by $14,907.00 to pay for additional security services under the contract. The aggregate total of the ordinance for funding is $279,256.64.
Contract modification in the amount of $14,907.00
1.1 Amount of additional funds ...
Click here for full text