Title
Information Technologies Department recommending the Board approve and authorize the Chair to execute Agreement 6418 with Foresite MSP, Inc.to provide cyber security monitoring and risk assessment services for the term of March 16, 2022 through March 15, 2023 for a not-to-exceed amount of $96,500.
FUNDING: General Fund.
Body
DISCUSSION / BACKGROUND
The Information Technologies Department entered into agreement 5458 with Digital Lantern, effective March 16, 2021, to provide cyber security monitoring and risk assessment services for a one-year service period. During this service period, Digital Lantern was acquired by Foresite MSP, Inc. In order to move forward with these vital security services, Agreement 6418 with Foresite has been initiated for the coming year of services.
Foresite provides cost-effective and advanced cyber defense services for US counties, states, and small business organizations, such as security monitoring, threat detection and analysis, log retention and management, incident alerting and response, mitigation recommendations, and on-call technical support. Foresite also provides integrated risk management solutions such as risk assessments, automated policy, practice, and technology scoring, mitigation plans aligned to compliance framework, and safebreach attack simulations and environment testing. Foresite will provide El Dorado County with advanced security operations through 24/7/365 Security Monitoring and Support Services (SMSS) protecting the County against complex threats via the managed IT Security Operation Center (SOC). Foresite also provides Security Information and Event Management (SIEM) offering real-time analysis of our infrastructure and continous monitoring of cyber threats. Foresite will also provide a one-time high risk assessment of our security environment, including a gap assessment, action plans, and consulting services.
ALTERNATIVES
The Board could refuse to sign this contract, which would terminate our countywide cyber security monitoring services, and the County would need to determine an alternative way to provide 24x7 security monitoring and oversight.
PRIOR BOARD ACTION
N/A
OTHER DEPARTMENT / AGENCY INVOLVEMENT
N/A
CAO RECOMMENDATION / COMMENTS
Approve as recommended.
FINANCIAL IMPACT
There is no impact to Net County Cost. Appropriations are included in the Information Technologies budget for ongoing security monitoring services.
CLERK OF THE BOARD FOLLOW UP ACTIONS
Clerk of the Board to obtain the Board Chair's signature on two copies of Agreement 6418 with Foresite MSP, Inc.and return one certified copy to the Chief Administrative Office, Central Fiscal Unit, Attention: Audra Anderson.
STRATEGIC PLAN COMPONENT
Good Governance
CONTACT
Tonya Digiorno, Director of Information Technologies