File #: 23-1402    Version: 1
Type: BID, RFP, RFQ, COOP, SOLE SOURCE, OPTION YEAR Status: Agenda Ready
File created: 12/1/2023 In control: City Council
On agenda: 12/19/2023 Final action:
Title: Approve the award of Cooperative Procurement 24-038, Rapid7 Managed Detection and Response (MDR) Solution, to Carahsoft Technology Corporation, for an amount not to exceed $116,062.21 and for a 12-month term
CITY COUNCIL AGENDA ITEM

ACTION REQUESTED:
title
Approve the award of Cooperative Procurement 24-038, Rapid7 Managed Detection and Response (MDR) Solution, to Carahsoft Technology Corporation, for an amount not to exceed $116,062.21 and for a 12-month term
body

DEPARTMENT: Information Technology

SUBMITTED BY: Jacqueline Nguyen, Director

BOARD/COMMISSION REVIEW:
N/A

BACKGROUND:
Technology is constantly evolving, as are the cybersecurity challenges facing organizations. According to an article published by Microsoft, the top five cybersecurity challenges facing organizations are:

1. Managing the increased risk of ransomware/cyber-extortion
2. Ensuring cloud resources, workloads, and apps are securely configured
3. Gaps in protection across hybrid, multi-cloud, and multi-platform environment
4. Challenges in recruiting qualified security professionals
5. Enabling end-user productivity without sacrificing security

While the IT Department has made great strides in the past few years to address many areas of cybersecurity, the City would benefit from additional assistance from industry experts on cybersecurity issues as well as having these experts available on-call to address certain cybersecurity issues as they arise.

Prior to this year, the amount of this procurement did not rise to City Council level approval. This year, with price increase and the addition of vulnerability management features, it now must be approved by the City Council.

DISCUSSION:
The purpose of this procurement is to renew Managed Detection Response (MDR) services from Rapid7.
Rapid7's MDR service brings the technology and experience needed to detect and respond to targeted interactive threats using leading threat detection methodologies. Once a potential threat is identified through technology or analysis, Rapid7's 24/7 Security Operations Center (SOC) performs validation of the event before generating an alert detailing the event in the City's environment. When the event is an i...

Click here for full text