Title
Endpoint Detection and Response
by and between Sedgwick County and ConvergeOne
].
Body
NOTE: As of 3/27/19, an agreement could not be reached with the vendor. Closing this until further notice.
Contract Approval Process Form - Please see Section V of Charter 68 for reference.
1. If the request is over a $10,000 spend, have these services been competitively bid (pursuant to Purchasing Charter Resolution 68)? IT Security Products & Services were approved for Joint Governmental Purchase on Bid Board item 18-2040, State of Kansas contracts 38294 and 38299 with ConvergeOne.
a. If not, has this purchase received a waiver of competitive bidding from the Purchasing Director? Please provide proof.
2. Purpose of the Contract (please be specific) Last year, we sought a decision package for a solution to replace our current traditional antivirus system with a Next Generation Antivirus and Endpoint Detection and Threat Response solution (EDR). As attack vectors increase, complexities in the malicious software, ransomware, and viruses compound to elude scanning it is only a matter of time before a breach occurs. An EDR solution helps IT Security work to identify potentially malicious activity and isolate.
3. Justification for the Contract
a. Do we perform the services in house? This is a tool to augment the services we can do in-house with IT Security.
b. Is there an option to perform the services in house? No, the tools and softwares are necessary.
c. Do any other current County vendors provide the services (i.e., could we amend a current contract to add these services)? We currently use Symantec for Anti-Virus, this contract is adding their EDR solution to the Anti-Virus package.
4. Scope of the Contract
a. What services specifically will the Contractor be providing? The vendor priced installation and 3 years of support into one and then split it out into 3 yearly PO payments. This contract will allow for us to get the Symantec EDR solution up and running, then pay a yearly subscription cost to maintain the licensing.
b. In the alternative, if this is a revenue-generating contract for the County, what services specifically will the County be providing? Not revenue generating.
5. What is the anticipated spend under this contract for all possible years of the contract (e.g., if this is a contract for 1 year with one 1-year option to renew, what is the total spend for both years of the contract)? 3 year contract, total spend is $162,802.91.
a. In the alternative, if this is a revenue-generating contract for the County, what is the anticipated annual revenue under this contract? Not Applicable
b. Please note: if the anticipated spend of the contract is $50,000+, the contract will need to be placed on a BoCC agenda for commission approval. Do not use this template for items going on an agenda. Please contact the Manager's Office if you have any questions.
6. If this is a renewal/extension of an existing contract, what was the previous annual spend for these services with this vendor? This is a new contract.
a. If the services were performed by another vendor, what was the previous annual spend for those services? Not Applicable
b. In the alternative, if this is a revenue-generating contract for the County, what was the previous annual revenue for performance of these services? Not Applicable
7. Requested Term of the Contract 3-years
a. Should the contract include any language for renewal? We will monitor the technology performance over the next 3 years and seek renewal towards the end should the technology remain a need.
8. Are there any specific terms that the user department would like included in the contract? None
9. What is the deadline for the user department receiving a draft of the contract? 3/6/19
10. Will any private health information be exchanged between Sedgwick County and the vendor? If so, in what capacity? (If yes, a Business Associate Addendum (BAA) is required as an addendum to the agreement.) No