CITY COUNCIL AGENDA ITEM
ACTION REQUESTED:
title
Approve the award of RFP 23-172, Cyber Security Audit, to Janus Associates for an amount not to exceed $103,112 for a one-year term
body
DEPARTMENT: Information Technology
SUBMITTED BY: Jacqueline Nguyen, Director
BACKGROUND:
City departments manage vast amounts of sensitive data. This includes personal information, critical infrastructure details, and operational data. The cyber security audit aims to fortify defenses and protect this information from unauthorized access and potential breaches.
The regulatory landscape surrounding cyber security is continually evolving. The audit will identify and mitigate risks, ensuring that the City adheres to the highest standards.
In September 2023, the Electric Utility, in conjunction with the Water Utilities and Information Technology Department (IT), issued Request for Proposal (RFP) 23-172 for Cyber Security Audit services. The successful vendor will simulate a cyber-attack and inform the City of vulnerabilities identified.
DISCUSSION:
|
Advertisement Date: |
09/26/2023 |
Notices Sent: |
337 |
|
Opening Date: |
10/25/2023 |
Planholders: |
78 |
|
|
|
Proposals Received: |
11 |
Proposals were received from the following vendors:
|
COGENT Infotech Corporation |
DirectDefense |
|
Certus Cybersecurity Solutions LLC |
Enterprise Risk Management, Inc. dba ERMProtect |
|
Control Infotech Inc. |
Global Solutions Group, Inc. |
|
JANUS Software Inc., dba JANUS Associates |
Sentinel Technologies |
|
TAC Security Inc. |
TRC Companies |
|
USA TECHNOLOGY CONSULTANTS LLC |
|
A selection team comprised of staff from the Electric Utility, Water Utility and IT evaluated the proposals, which were scored based upon the criteria set forth in the RFP:
1. Capability, Capacity and Qualifications of the Firm (25%)
2. Suitability and Quality of the Approach/Methodology (35%)
3. Milestones and Deliverables (20%)
4. Outcomes to be Achieved (20%)
After review and scoring of the proposals, the vendor with the highest qualification score, Janus Associates, is recommended for award. The table below provides a summary of the final qualification scores:
|
Vendor |
Qualification Score |
|
JANUS Software Inc., dba JANUS Associates |
82.85 |
|
Enterprise Risk Management, Inc. dba ERMProtect |
69.55 |
|
Global Solutions Group, Inc. |
67.15 |
|
Sentinel Technologies |
66.35 |
|
COGENT Infotech Corporation |
61.7 |
|
TRC Companies |
61.3 |
|
USA TECHNOLOGY CONSULTANTS LLC |
60.1 |
|
TAC Security Inc. |
54.7 |
|
Certus Cybersecurity Solutions LLC |
49.5 |
|
Control Infotech Inc. |
43.2 |
|
DirectDefense |
0 |
The term of the contract is from date of award to December 31, 2024 with no options to extend.
FISCAL IMPACT:
Cyber Security auditing services is expensed to the account numbers listed below. A combined total of $197,907 is approved as part of the 2024 budget across the respective funds for this service. The requested award is within budget.
|
Account Number |
Fund Description |
Total Budget Amount |
|
16101100-531309 |
General Fund |
$1,071,557 |
|
16101300-531309 |
Electric Utility Fund |
$86,300 |
|
16101500-531309 |
Water Utility Fund |
$85,125 |