title
Approve 2 agreements, the first with Key Government Finance, Inc. and the second with ConvergeOne, for a total of $278,350, to pay for one-time setup cost and recurring costs being paid in 5 year installment payments for the purchase of Cisco Stealthwatch software licenses, for the term of June 25, 2019 through June 24, 2024; and Authorize the Chief Information Officer to execute the agreements and any necessary amendments up to 15 percent of the contract amount within annual appropriations
body
Published Notice Required? Yes ____ No _X _
Public Hearing Required? Yes ____ No _X _
DEPARTMENTAL RECOMMENDATION:
The Department of Information Technology (DoIT) recommends the Board of Supervisors:
1. Approve 2 agreements, the first with Key Government Finance, Inc. and the second with ConvergeOne, for a total of $278,350, to pay for one-time setup cost and recurring costs being paid in 5 year installment payments for the purchase of Cisco Stealthwatch software licenses, for the term of June 25, 2019 through June 24, 2024; and
2. Authorize the Chief Information Officer to execute the agreements and any necessary amendments up to 15 percent of the contract amount within annual appropriations.
SUMMARY:
Network security is important to Solano County, so to strengthen the County’s overall security posture and comply with regulatory requirements, a robust internal network security monitoring tool needs to be implemented.
Cisco Stealthwatch is a network security monitoring tool that will dramatically improve network visibility, security and incident response across the entire network. Stealthwatch will provide real-time situational awareness of all users, devices and traffic on the network, in the data center and in the cloud. This allows the security team to quickly and effectively detect and respond to threats by providing real-time, continuous monitoring and pervasive view into all network traffic.
Cisco is offering a financing arrangement through its partner, Key Government Finance, Inc. that spreads the cost over five-annual installment and bears no interest. The agreement covers the period from June 25, 2019 through June 24, 2024. ConvergeOne is providing the one-time setup of the Cisco tool and will be paid by Key Government Finance.
FINANCIAL IMPACT:
The total cost of the proposed contract is $278,349.75. This includes $24,035 in one-time setup costs provided by ConvergeOne and $50,862.95 in five annual payments. All payments will be paid to Key Government Finance. There are sufficient budgeted appropriations for the purchase in the FY 2018/19 and FY 2019/20 budget years.
DISCUSSION:
To protect the confidentiality, integrity and availability of the County’s network and data, it is imperative that the County continuously invest in new security technologies that will reduce security risk and improve the County’s overall security posture.
The Department of Information Technology (DoIT) needs a tool that will provide network visibility, accountability, security and incident response across the entire network. Additionally, the tool needs to be compatible with existing security tools so it can be integrated.
Cisco Stealthwatch is an advanced network security monitoring tool that will improve network visibility, real-time situational awareness of all users, devices and traffic on the network in the data center and in the cloud. This will allow the security team to quickly and effectively detect and respond to threats by providing real-time, continuous monitoring and pervasive view into all network traffic. Cisco Stealthwatch is scalable and will be able meet DoIT’s security requirements for an enterprise-wide solution.
ALTERNATIVES:
The Board could choose not to approve the agreement and not purchase Cisco Stealthwatch however, this is not recommended for several reasons:
1. Without a network security monitoring tool, DoIT will not have visibility into the network making it difficult to trouble-shoot network performance issues.
2. Without a network security monitoring tool, DoIT will not be able to detect and respond quickly to security threats inside the County network.
3. Without a network security monitoring tool, the confidentiality, integrity and availability of the County network and data are at risk.
Without a network security monitoring tool, the County will not be in compliance with federal and state regulatory requirements.
OTHER AGENCY INVOLVEMENT:
County Counsel has reviewed the agreements, and the Treasurer and Auditor-Controller have been consulted regarding the Key Government Finance agreement.
CAO RECOMMENDATION:
APPROVE DEPARTMENTAL RECOMMENDATION