San Mateo County Logo
File #: 19-425    Version: 1 Name:
Type: Resolution Status: Passed
File created: 4/18/2019 Departments: INFORMATION SERVICES
On agenda: 5/14/2019 Final action:
Title: Adopt a resolution waiving the Request for Proposal (RFP) process and authorizing the County's Chief Information Officer, or his/her designee, to execute an agreement with Microsoft to provide Active Directory services for the term of May 15, 2019 to December 31, 2019, in an amount not to exceed $189,000.
Attachments: 1. 20190514_r_Microsoft.pdf
Date Ver.Action ByActionResultAction DetailsMeeting DetailsVideo
No records to display.
Special Notice / Hearing: None__
Vote Required: Majority

To: Honorable Board of Supervisors
From: Jon Walton, Chief Information Officer, Information Services Department
Subject: Agreement for Active Directory services

RECOMMENDATION:
title
Adopt a resolution waiving the Request for Proposal (RFP) process and authorizing the County's Chief Information Officer, or his/her designee, to execute an agreement with Microsoft to provide Active Directory services for the term of May 15, 2019 to December 31, 2019, in an amount not to exceed $189,000.

body
BACKGROUND:
Active Directory (AD) is a Microsoft technology used to manage computer and other devices on a network by allowing administrators to create and manage permissions and access to County's network resources. Active Directory Domain Services (AD DS) is the cornerstone of every Windows domain network. It stores information about members of the domain, including devices and users, verifies their credentials, and defines their access rights.

While the County has a number of AD instances throughout the County, it is important to establish best practices in its administration through governance to ensure that potential security gaps are identified. Microsoft was chosen for their expertise in AD and will help facilitate the implementation of Microsoft's recommended best practices.

DISCUSSION:
Microsoft's professional services will assist the County by assessing and developing recommendations with respect to the County's AD operations by conducting a series of workshops to determine the future direction of the County's environment as well as performing a "Cybersecurity Risk Review" assessment.
Cyber Security has been the focal point of network operations with incidents such as the 2017 Equifax breach. The risks associated with ransomware are on a rapid rise. The results of the AD assessment will provide the County with a report documenting security gaps, provide recommendations based on i...

Click here for full text