Special Notice / Hearing: None__
Vote Required: Majority
To: Honorable Board of Supervisors
From: Michael Wentworth, Chief Information Officer, Information Services Department
Subject: Agreement with Deloitte and Touche LLP to provide managed security services and additional enterprise security tools and products
RECOMMENDATION:
title
Adopt a resolution authorizing the County Executive, or the County Executive’s designee, to prepare and execute an agreement with Deloitte and Touche LLP to provide professional services, training, software licensing, and maintenance for managed security services, for the term of September 12, 2023 through September 11, 2028, in an amount not to exceed $10,285,158.
body
BACKGROUND:
The County of San Mateo, Information Services Department (ISD) provides cybersecurity support to all County departments. ISD has a variety of security protections on all County laptops, desktops, and servers including anti-virus software, local data encryptions, and multi-factor authentication, among others.
On September 20, 2022, ISD issued a Request for Proposal (RFP) Number ISD-20231866 to identify one vendor with extensive technical experience, availability of local personnel, and resources for the purpose of providing and implementing the “best of breed” cybersecurity platforms and managed security services.
DISCUSSION:
With the continuing evolution of cybersecurity threats, ISD seeks to increase security integrity awareness and security event response capabilities.
Deloitte and Touche LLP, one of twelve respondents to the Cybersecurity Services and Platforms RFP was selected to provide a solution across all platforms and its services best meet the County’s requirements. Further, it has extensive experience providing cybersecurity services as well as fulfilling all of the County’s requested technical and administrative criteria. ISD is seeking approval from your Board to execute an agreement with Deloitte and Touche LLP to provide managed security services and advanced cybersecurity platforms.
The County Attorney’s Office has reviewed and approved the resolution as to both form and content. Once prepared, the County Attorney’s Office will review and approved the agreement as to form and content.
The resolution contains the County’s standard provisions allowing amendment of the County’s fiscal obligations by a maximum of $25,000 (in aggregate).
Approval of this agreement will contribute to the performance measure by providing the foundation of significantly increasing Countywide cybersecurity protections.
PERFORMANCE MEASURE:
|
Measure |
FY 2022-23 Actual |
FY 2023-24 Projected |
|
Availability of Key Infrastructure |
99.90% |
100% |
FISCAL IMPACT:
The term of this agreement is from September 12, 2023, through September 11, 2028. The total not to exceed amount of this agreement is $10,285,158 from multiple funding sources.
Funding in the amount of $5,036,435 to implement various cybersecurity platforms and tools will come from Measure K funds included in Information Services Department’s FY 2023-24 Recommended Budget.
Funding in the amount of $1,461,015 for Managed Security Services has been partially included in Information Services Department’s FY 2023-24 Core-IT service charges and will be adjusted during FY 2023-24 Adopted Budget.
The remaining amount of $3,787,708 (or $1,793,854 annually) for ongoing Managed Security Services will be included in ISD’s annual service charges beyond FY 2023-24.