cover
TO: Mayor Richard C. Irvin
FROM: Michael R Pegues, Chief Information Officer
Leela Karumuri, Director Cyber & Technology Risk
DATE: April 11, 2023
SUBJECT:
A resolution requesting approval to append resolution R22-098 dated 4/12/2022 from Data Defenders LLC, 111 Jackson Blvd, Suite 1700, Chicago IL 60604 for $208,326.00.
PURPOSE:
The City of Aurora Information Technology (IT) Department is seeking to expand the scope of managed security services to add additional service components and to expand service coverage throughout the City’s technology infrastructure.
BACKGROUND:
The City of Aurora is requesting expansion of Data Defenders services to include delivery of MSS service components, products, and/or tasks to the City’s current DataShield® managed security services subscription.
The addition of these annual software subscription add-ons will enable additional endpoint device security, protections, and management capabilities to the City's cybersecurity program. As threats become advanced and persistent, Data Defenders has advised the City Senior IT leadership that it is prudent and necessary to implement enhanced point solutions that advance the City's cybersecurity program to continuously mitigate threats against the City's technology enterprise. An assessment of the City’s overall cybersecurity program identified area of improvement addressed by the point solutions that are being proposed in this change order that would further enhance the City’s cybersecurity.
DISCUSSION:
Data Defenders is recommending the additional software services as described in the following section.
PRODUCT #1 - Qualys Patch Management Software Annual Subscription Add-on
Data Defenders will acquire an annual software subscription add-on of the Qualys Patch Management module as part of the current Data Defenders DataShield® MSS Vulnerability Management service to expand the vulnerability and patch management capabilities. This add-on will enable Data Defenders and the City to implement more effective remediation of the City employee computing devices ("endpoints") as vulnerabilities are identified through the current Qualys vulnerability scanning module in place. This add-on will enable more efficient management and oversight of the remediation process which support the objective of hardening the City's endpoints to reduce the risk of successful cyberattacks against the City’s technology infrastructure and data.
PRODUCT #2 - CrowdStrike Data Loss Prevention Software Annual Subscription Add-on
Data Defenders will acquire an annual software subscription add-on of the CrowdStrike Data Loss Prevention module as part of the current Data Defenders DataShield® MSS Endpoint Detection and Response service to expand the endpoint protection and management capabilities. This software add-on will enable Data Defenders and the City to implement effective data loss prevention capabilities to enhance data protection capabilities for the City.
PRODUCT #3 - Keeper Security Password Management Annual Subscription
Data Defenders will acquire an annual software subscription add-on for the Keeper Security Password Management SaaS solution as part of the current Data Defenders DataShield® MSS Privilege Access Management service. This software add-on will enable Data Defenders and the City to implement privilege access management solution to provide an enhance endpoint and application security functions to protect the City’s technology infrastructure and data and to more efficiently manage and enforce password standards across the City technology enterprise.
Item Description Contract Year Costs
Year 2023 Year 2024 Year 2025 Total Cost
Qualys Patch Mgmt Add-On $17,175.00 $17,175.00 $17,175.00 $51,525.00
CrowdStirke Device Control $4,500.00 $4,500.00 $4,500.00 $13,500.00
Keeper Security Password Mgmt $47,767.00 $47,767.00 $47,767.00 $143,301.00
Original Total Order Form DS-003 (R22-098) $3,538,912.20
Total New Order Form 208,326.00
Revised Grand Total for DataShield MSS Cost $3,747,238.20
A budget transfer will be required for the additional services to account # 101-1283-419-32.80
IMPACT STATEMENT:
These recommended additional services will provide enhanced cybersecurity protection and these protective measures are needed to close identified gaps in the City's existing cybersecurity program.
RECOMMENDATIONS:
Request approval to append resolution R22-098 dated 4/12/2022 from Data Defenders in the amount of $208,326.00 over the remaining three years out of the total five-year contract.
cc: Finance Committee
CITY OF AURORA, ILLINOIS
RESOLUTION NO. _________
DATE OF PASSAGE ________________
title
A Resolution requesting to append approved resolution R22-098, dated 4/12/2022 from Data Defenders LLC, 111 Jackson Blvd, Suite 1700, Chicago IL 60604 for $208,326.00.
body
WHEREAS, the City of Aurora has a population of more than 25,000 persons and is, therefore, a home rule unit under subsection (a) of Section 6 of Article VII of the Illinois Constitution of 1970; and
WHEREAS, subject to said Section, a home rule unit may exercise any power and perform any function pertaining to its government and affairs for the protection of the public health, safety, morals, and welfare; and
WHEREAS, (more efficient management and oversight of the remediation process which support the objective of hardening the City endpoints to reduce the risk of successful cyberattacks against the City’s technology infrastructure and data, and;
WHEREAS, Endpoint Detection and Response service to expand the endpoint protection and management capabilities; and
WHEREAS, implement privilege access management solution to provide an enhance endpoint and application security functions to protect the City’s technology infrastructure and data and to more efficiently manage and enforce password standards across the the City technology enterprise; and
WHEREAS, a budget transfer will be required to account 101-1283-419.32-80 for the additional services.
NOW, THEREFORE, BE IT RESOLVED by the City Council of the City of Aurora, Illinois, as follows: approves resolution to append resolution R22-098, dated 4/12/2022 from Data Defenders LLC, 111 Jackson Blvd, Suite 1700, Chicago IL 60604 for $208,326.00. Total revised amount of the original agreement not to exceed $3,747,238.20 over the over remaining three years out of the total five-year contract.