DATE: JUNE 23, 2020
SUBJECT:
Title
RESOLUTION SELECTING AND AUTHORIZING PURCHASE OF ANNUAL SUBSCRIPTION SERVICES AND SUPPORT FROM SHI INTERNATIONAL CORP. FOR ENTERPRISE VULNERABILITY MANAGEMENT FROM JULY 23, 2020 THROUGH JULY 22, 2021 FOR A COST OF $44,251 AND AUTHORIZING SUBSEQUENT ANNUAL SUBSCRIPTIONS, WITH AN ESTIMATED FIVE-YEAR TOTAL COST OF OWNERSHIP OF $221,022. THIS WORK HAS BEEN DEEMED AN OPERATIONAL NECESSITY. WITHOUT RENEWAL BY THE DISTRICT, AT ITS DISCRETION, THE AGREEMENT TERMINATES AUTOMATICALLY. FUNDS REQUIRED FOR THE FIRST YEAR HAVE BEEN BUDGETED IN FY20. FUNDS REQUIRED FOR FUTURE YEARS WILL BE BUDGETED IN THE APPROPRIATE FISCAL YEAR, SUBJECT TO BOARD APPROVAL.
Body
EXECUTIVE SUMMARY:
In the fall of 2018, the District experienced a cyber-security event that required examination and advancement of the District's Cybersecurity suite of tools. One of the legacy security tools that needs replacement is a Vulnerability Management Tool (VMT). The new VMT will replace our current one with a next-generation solution that offers better alignment and integration with the District's new technology landscape. This new solution ties into the District's "Cyber Secure Port" strategy to enhance capabilities across people, process, and technology pillars by offering heightened active and continuous assessment and validation of both known and unknown vulnerabilities.
The District utilized an agreement pre-competed by the National Association of State Procurement Officers (NASPO), Software VAR, Contract #: ADSPO16. The pre-competed NASPO contract is for the system, licensing, and implementation of this VMT delivered through SHI International Corp.
Attachment A is the vendor signed Purchase Agreement No. 02-2020BD with SHI International Corp.
The initial Purchase Agreement is for a single year. However, as recommended, staff is seeking authorization to purchase additional annual VMT subscriptions from SHI International Corp. The estimated five-year total ...
Click here for full text