File #: ID 21-0291    Version: 1 Name:
Type: Resolution Status: Passed
File created: 3/30/2021 In control: City Council
On agenda: 4/20/2021 Final action: 4/20/2021
Title: Resolution Authorizing Tangible Security, Inc. to Continue Contract for Cyber-Security Services Staff Augmentation for $740,326.50
Attachments: 1. Tangible Proposal, 2. Tangible - Pricing Plan Table, 3. MWBE Waiver-Tangible.pdf, 4. 21-0291 RES Tangible.pdf

Title

Resolution Authorizing Tangible Security, Inc. to Continue Contract for Cyber-Security Services Staff Augmentation for $740,326.50

Body

 

Council Priority:  Ensure Fiscal Stewardship, Transparency, & Accountability

 

Department: Information Technology

Council District: ALL

 

Public Hearing: N/A

Advertising Date/By: N/A

 

Contact 1 and Phone: Tasha Swann Holsey, 335-5686

Contact 2 and Phone: Jane Nickles, 373-2314

 

PURPOSE:

The IT Department requests to continue contracting with Tangible Security for our Cyber-Security Consultant by signing a three-year contract with Tangible Security Inc. The Tangible consultant has worked with the IT Department for 6 years as a full time contract employee developing a cyber-security program to enhance data security, availability, integrity and confidentiality, which positively affects the security of the City's existing network infrastructure, and improves the City's security posture. This contract employee is a significant contributor to the on-going development of the City’s cyber-security strategy.

 

BACKGROUND:

CyberSeek.org reports over 20,000 unfilled cyber-security job openings in North Carolina. The number of Certified Information System Security Professionals (CISSP) reported in the state is 2,747. Furthermore, according to CyberSeek, there are 44 people in the Greensboro/High Point area with a CISSP certification and 142 job openings requesting the certification. The potential to find and hire experienced cyber-security professionals with advanced certifications is extremely low.  For these reasons the IT Department has contracted with Tangible Security Inc., for professional services to support the City's Cyber-Security Program. Our cyber-security consultant is CISSP certified with over 15 years’ experience in the industry. This individual has been a key contributor to the development of the City’s cyber-security program and to our attainment of ISO27001 certification an international standard for managing information security.

 

A MWBE waiver was requested to continue cyber-security initiatives with our current consultant.  This individual has demonstrated advanced technical competence, skills, and experience to design, engineer, implement, and manage cyber-security initiatives and strategies tailored to protecting the City of Greensboro’s network environment.  The approved MWBE waiver allows us to retain this highly skilled cyber-security professional and continue the work that is necessary to secure a vast complex network of computers and servers connecting over one hundred facilities and supporting thousands of end users. 

 

The current contract with Tangible Security Inc. expires in June 2021. The IT Department wishes to continue services for an additional 3 years from July 1, 2021 to June 30, 2024, for continual cyber-security improvements and support of the City’s Cyber-Security Program.

 

BUDGET IMPACT:

Funding for the full time cyber-security consultant for 36 months is included in the adopted budget.  The funding will be provided by Information Technology Department.

 

Item

Amount

Account

Cybersecurity Specialist for 3yrs.

$740,326.50

682-0730-01.5413

 

 

 

Total:

 $740,326.50

 

 

RECOMMENDATION / ACTION REQUESTED:

It is the recommendation of Information Technology that we encumber funds to continue working with Tangible Security’s Cyber-Security Consultant. It is established that continuing to contract with Tangible Software Inc. dba Tangible Security Inc. is the most reasonable and efficient way to meet the security objectives of the organization.