Agenda Item Wording:
title
Authorize Agreement for Cybersecurity Assessment and Cyber Resilience Program - Authorize the City Manager to enter into a one-time service agreement with Global Solutions Group for a comprehensive Cybersecurity Assessment, Cyber Resilience Program, and Implementation Plan, for a total of $174,036.
body
Deadline for Action: 11/18/2024
Submitting Department: Finance and Technology Services
Contact Name and Phone Number:
Chris Terry, Information Systems Analyst, 559-713-4018 chris.terry@visalia.gov
John Howson, IS Manager, 559-713-4122 john.howison@visalia.gov
Renee Nagel, Finance & Technology Director, 559-713-4375 renee.nagel@visalia.city
Department Recommendation:
It is recommended that the City Council authorize the City Manager to enter into a one-time service agreement with Global Solutions Group for a Cybersecurity Assessment, Cyber Resilience Program, and Implementation Plan. The entire project, including assessment, planning, and initial implementation, will cost $174,036. No further annual maintenance is required as this is a one-time project
Background Discussion:
The City of Visalia requires a comprehensive Cybersecurity Assessment and Cyber Resilience Program (CRP) to address current security needs and build resilience against emerging threats. This project will focus on creating and updating cybersecurity policies, conducting targeted staff training, and implementing proactive measures such as penetration testing and vulnerability scanning. These efforts aim to strengthen the City’s ability to prevent, detect, and respond to cyber threats effectively, ensuring alignment with best practices and regulatory standards.
A comprehensive RFP was issued (RFP 24-25-03) to select a consultant to provide these services. A total of 22 responses to this RFP were received. A steering committee from the IS department, comprising four staff members, was created to review and rate RFP responses focused on providing municipal cybersecurity solutions and the firms’ abilities to meet the RFP requirements. After a thorough review 3 firms were selected to interview.
The streeting committee interviewed Global Solutions Group, Securance Consulting, and ERM Protect. Ultimately, the committee selected Global Solutions Group based on their references, municipal cybersecurity expertise, regulatory compliance, and proven track record with local, state, and federal governments. Global Solutions has completed over 1000 cybersecurity assessment projects and have provided similar services and plans to City of San Jose, City of Phoenix, City of Roseville, City of Sunnyvale, Department of Homeland Security, USDA, Department of Treasury, and many others.
Fiscal Impact:
Funds for this project were appropriated by Council on December 20, 2021. The following CIP was established 6420-72000/CP0506 with $210,000 allocated for this project. The American Rescue Plan Act (ARPA) CIP will fund the entire $174,036 for the cybersecurity assessment and resilience program implementation. Global Solutions Group has submitted certificates of compliance with all federal guidelines and provided the required bond for professional services.
Prior Council Action: On December 20, 2021, staff presented to Council the proposed American Rescue Plan Act (ARPA) funded projects, this included a full IT security and vulnerability assessment and employee cybersecurity training.
Other: N/A
Alternatives: Direct staff to re-issue the RFP or come up with an alternative method to determine and establish a cybersecurity baseline. The ARPA funding would not be available for this.
Recommended Motion (and Alternative Motions if expected):
recommendation
Authorize the City Manager to enter into a one-time service agreement with Global Solutions Group for a Cybersecurity Assessment, Cyber Resilience Program, and Implementation Plan, for a total of $174,036.
end
Attachments:
Attachment 1- Draft Agreement.docx
Attachment 2 - RFP 24-25-03 Cybersecurity Assessment.pdf
Attachment 3 - Global - Proposed Fees.pdf