Title
Information Technologies Department recommending the Board authorize the Purchasing Agent to approve and execute the updated Crowdstrike Falcon Complete Limited Warranty Agreement in conjunction with existing Purchase Contract 9896 for coverage through January 15, 2027.
FUNDING: There is no financial cost for this warranty update.
Body
DISCUSSION / BACKGROUND
Since January 2018, the Information Technologies (IT) Department has used Crowdstrike Falcon advanced breach and endpoint protection services with Antivirus, Threat Intelligence, USB Device Control, and Threat Hunting capabilities. In March 2022, IT upgraded to Falcon Complete managed detection and response (MDR) services, which delivers 24/7 expert management, monitoring, and response for the Crowdstrike Falcon platform. The Crowdstrike Falcon security solution is an industry leader to stop advanced threats, including next-gen antivirus, endpoint detection through Falcon Insight, and threat protection with Falcon Identity. The Crowdstrike Falcon Complete team, available 24/7, uses Overwatch to manage threat hunting and ensures comprehensive security for our El Dorado County IT assets, remediating security incidents in minutes to minimize impacts to the County.
In January 2026, the IT Department began using Crowdstrike to also provide Security Information and Event Management (SIEM) services for the IT Security Operations Center (SOC) by offering real-time analysis of the County's infrastructure and providing continuous monitoring of cyber threats through their Falcon Next-Gen SIEM services, including 365-day log retention and essential support services. In May 2026, the County increased their SIEM capacity to be able to pass all data sources into the SIEM to provide complete coverage for potential security events.
On September 27, 2026, Crowdstrike notified the County that their Falcon Complete LImited Warranty agreement has been updated to now cover Ransomware related events. The County needs to accept or opt-out from coverage within 30 days. If Board approves this warranty update, we will execute the update warranty and amend Purchase Contract 9896.
ALTERNATIVES
The Board could choose to decline the updated and the County's current warranty coverage would expire in 30 days.
PRIOR BOARD ACTION
Legistar file 22-0850 - May 24, 2022 - Board authorized the Purchasing Agent to issue a Purchase Order in the amount of $32,775.52 for the period of June 5, 2022, to March 3, 2023 for additional licenses for necessary security endpoint protection and authorized the Purchasing Agent to accept and execute Crowdstrike quote Q-441989.
Legistar file 23-0082 - February 14, 2023 - Board authorized the Purchasing Agent to issue a Purchase Order in the amount of $148,455.80 for the period of March 4, 2023, through March 3, 2024, for Falcon Complete endpoint protection and authorized the Purchasing Agent to accept and execute Crowdstrike quote Q-579846.
Legistar file 24-0185 - February 27, 2024 - Board authorized the Purchasing Agent to issue a Purchase Order in the amount of $155,878.90 for the period of March 4, 2024, through March 3, 2025 for Falcon Complete endpoint protection and authorized the Purchasing Agent to accept and execute Crowdstrike quote Q-823645.
Legistar file 24-1582 - October 15, 2024 - Board approved an updated warranty document for our current term through March 3, 2025.
Legistar file 25-0124 - February 25, 2025 - Board approved the Purchasing Agent to issue a Purchase Order in the amount of $163,673.79 for the period of March 4, 2025 through March 3, 2026 for Falcon Complete endpoint protection and authorized the Purchasing Agent to accept and execute Crowdstrike quote Q-1132474.
Legistar file 25-1683 - December 9, 2026 - Board approved the Purchasing Agent to issue Purchase Contract 9896 in the amount of $211,013.81 for the period of January 16, 2026, through January 15, 2027, for Falcon Complete endpoint protection and Security Information and Event Management Services.
Legistar file 26-0632 - April 21, 2026 - Board approved the Purchasing Agent to amend Purchase Contract 9896 in increase the SIEM capacity by an additional 30 gigabytes through January 15, 2027, and increase the not-to-exceed amount to $240,194.46.
OTHER DEPARTMENT / AGENCY INVOLVEMENT
Procurement and Contracts
CAO RECOMMENDATION / COMMENTS
Approve as recommended.
FINANCIAL IMPACT
There is no financial impact to the current Purchase Contract with this warranty update.
CLERK OF THE BOARD FOLLOW UP ACTIONS
N/A
STRATEGIC PLAN COMPONENT
N/A
CONTACT
Amanda Earnshaw, Chief Information Officer