Loading...
R20-073 1 RESOLUTION NO. R20-073 2 3 A RESOLUTION OF THE CITY OF BOYNTON BEACH, 4 FLORIDA, APPROVING AND AUTHORIZING THE CITY 5 MANAGER TO SIGN THE STATEMENT OF WORK SUMMARY 6 FROM ERMPROTECT (ENTERPRISE RISK MANAGEMENT) 7 TO PURCHASE AND IMPLEMENT QUALYS ADVANCED 8 THREAT DETECTION AND PATCH MANAGEMENT 9 SOFTWARE TO MONITOR, DETECT, REMEDIATE AND 10 PREVENT CYBERSECURITY EVENTS ON OUR 'CITY 11 COMPUTER ASSETS; AND PROVIDING AN EFFECTIVE 12 DATE. 13 14 WHEREAS, Cybersecurity event detection and prevention are vital to our 15 organization's operational success; and 16 WHEREAS, the Qualys system provides an additional high level of security and 17 protection from cybersecurity incidents by performing threat detection, alerting and 18 prevention, as well as system vulnerability assessments and remediation; and 19 WHEREAS, these modules will be implemented to monitor and remediate City, 20 Utilities and Police Department networks and computer assets; and 21 WHEREAS, the City Commission of the City of Boynton Beach upon 22 recommendation of staff, deems it to be in the best interest of the citizens and residents to 23 approve and authorize the City Manager to sign the Statement of Work Summary from 24 ERMProtect(Enterprise Risk Management) in the amount of$42,000.00 to purchase and 25 implement Qualys advanced threat detection and patch management software to monitor, 26 detect,remediate and prevent cybersecurity events on our City computer assets. 27 NOW, THEREFORE, BE IT RESOLVED BY THE CITY COMMISSION 28 OF THE CITY OF BOYNTON BEACH,FLORIDA,THAT: 29 Section 1. The foregoing"Whereas"clauses are hereby ratified and confirmed 30 as being true and correct and are hereby made a specific part of this Resolution upon 31 adoption. S:\CA\RESO\Ageements\Agreement with Qualys(Cyber security)-Reso.docx • 32 Section 2. The City Commission of the City of Boynton Beach, Florida, 33 hereby approves and authorizes the City Manager to sign the Statement of Work Summary 34 from ERMProtect(Enterprise Risk Management)in the amount of$42,000.00 to purchase 35 and implement Qualys advanced threat detection and patch management software to 36 monitor, detect, remediate and prevent cybersecurity events on our City computer assets. 37 A copy of the signed Statement of Work Summary is attached hereto and incorporated 38 herein as Exhibit"A". 39 Section 3. That this Resolution shall become effective immediately. 40 PASSED AND ADOPTED this 21st day of July,2020. 41 CITY OF BOYNTON BEACH, FLORIDA 42 YES NO 43 44 Mayor—Steven B. Grant kV- 45 46 Vice Mayor—Ty Penserga 47 48 Commissioner—Justin Katz 49 50 Commissioner—Woodrow L. Hay 51 52 Commissioner—Christina L. Romelus 53 54 VOTE 55 ATTEST: 56 57 Z; 58 C stal Gibson, MMC 59 City Clerk 60 61 62 (Corporate Seal) 1j 4Rtt) ' S:\CA\RESO\Agreements\Agreement with Qualys(Cyber security)-Reso.docx ' )ao air ERMProtect Cybersecurity Solutions 800 S.Douglas Rd. N940 Coral Gables,FL 33134 Statement of Work Summary The following describes the assessment scope,estimated duration and professional consulting fees related to the requested engagement. Customer Name: City of Boynton Beach Address: 100 East Ocean Avenue Boynton Beach, FL 33435 A. Scope To provide the client with the following: 1. Qualys a. Qualys Express Suite(Part#: Q-ESUITE) • Includes unlimited user accounts • 24x7 email and telephone Customer Support • Free certification and training • PCI is bundled for free with External IPs only • Unlimited Scheduled and On-Demand security scans • Unlimited network discovery maps • Remediation workflow management • Interactive and Template based reporting(Patch, Exec,Scorecard, etc.) Quantity: 1 b. Express VM Package (Internal VMs) (Part#:Q-X-VS-PKG) Quantity: 2,560 c. Qualys Virtual Scanner--Annual Subscription (Part#:VS) Quantity: 1 d. Qualys Patch Management(PM)—Annual Subscription (Part#:Q-S-PM) Quantity: 1,000 e. Express VM Packages (External Only)+ PCI (Part#:Q-XP-PKG) Quantity: 16 f. Qualys Virtual Scanner-Annual Subscription (Part#:Q-VS) • Daily vulnerability signature updates& maintenance Quantity: 1 g. Qualys Cloud Agent for VM (Part#:Q-X-CAP-VM) • Provides real-time VM assessment across millions of IT assets on-premise, elastic environments or endpoints Quantity: 1,000 ©2020 ERMProtect All rights reserved.CONFIDENTIAL&PROPRIETARY The content, information,templates and methodologies expressed,embodied and/or utilized herein constitute confidential and proprietary information and/or trade secrets belonging to ERMProtect("ERMProtect")and,except as otherwise expressly authorized in a written agreement with ERMProtect,shall not be disclosed,reproduced,disseminated,transferred or otherwise used in any manner directly or indirectly by any recipient hereof without the prior written permission of ERMProtect. ERMProtect Cybersecurity Solutions 800 S.Douglas Rd.N940 Coral Gables,FL 33134 Statement of Work Summary B. Deliverables As listed in the scope above. C. Professional Fees The cost for the Qualys product will be$42,000. D. Payment of Fees Payment term is Net 30 in accordance with GSA agreement. Payment will be made via check, mailed to—ERMProtect,800 S. Douglas Road,#940N,Coral Gables, FL 33134. E. GSA Contract The client may choose to purchase via ERMProtect's GSA contract number:GS-35F-0417X. F. Scheduling To schedule our consultant's time and coordination efforts to begin, ERMProtect requires a signed copy of this quote document. G. Non-Solicitation The client will not,directly or indirectly,for itself or for any other person,firm, corporation, partnership, association or other entity which competes in any manner with ERMProtect solicit or offer employment of any nature or attempt to enter into any contractual arrangement with any ERMProtect employee. H. Public Agency The City is public agency subject to Chapter 119, Florida Statutes. The Contractor shall comply with Florida's Public Records Law. Specifically,the Contractor shall: A. Keep and maintain public records required by the CITY to perform the service; B. Upon request from the CITY's custodian of public records, provide the CITY with a copy of the requested records or allow the records to be inspected or copied within a reasonable time at a cost that does not exceed the cost provided in chapter 119, Fla. Stat. or as otherwise provided by law; C 2020 ERMProtect All rights reserved.CONFIDENTIAL&PROPRIETARY The content, information,templates and methodologies expressed,embodied and/or utilized herein constitute confidential and proprietary information and/or trade secrets belonging to ERMProtect("ERMProtect")and,except as otherwise expressly authorized in a written agreement with ERMProtect,shall not be disclosed,reproduced,disseminated,transferred or otherwise used in any manner directly or indirectly by any recipient hereof without the prior written permission of ERMProtect. ERMProtect Cybersecurity Solutions 800 S.Douglas Rd.N940 Coral Gables,FL 33134 Statement of Work Summary C. Ensure that public records that are exempt or that are confidential and exempt from public record disclosure requirements are not disclosed except as authorized by law for the duration of the contract term and, following completion of the contract, Contractor shall destroy all copies of such confidential and exempt records remaining in its possession once the Contractor transfers the records in its possession to the CITY; and D. Upon completion of the contract,Contractor shall transfer to the CITY, at no cost to the CITY, all public records in Contractor's possession All records stored electronically by Contractor must be provided to the CITY, upon request from the CITY's custodian of public records, in a format that is compatible with the information technology systems of the CITY. E. IF THE CONTRACTOR HAS QUESTIONS REGARDING THE APPLICATION OF CHAPTER 119, FLORIDA STATUES, TO THE CONTRACTOR'S DUTY TO PROVIDE PUBLIC RECORDS RELATING TO THIS CONTRACT, CONTACT THE CUSTODIAN OF PUBLIC RECORDS: (CITY CLERK) 100 EAST OCEAN AVE. BOYNTON BEACH, FLORIDA, 33435. 561-742-6061. CITYCLERK@BBFL.US Scrutinized Companies By execution of this Agreement, in accordance with the requirements of F.S. 287-135 and F.S. 215.473, Contractor certifies that Contractor is not participating in a boycott of Israel. Contractor further certifies that Contractor is not on the Scrutinized Companies that Boycott Israel list, not on the Scrutinized Companies with Activities in Sudan List, and not on the Scrutinized Companies with Activities in the Iran Petroleum Energy Sector List, or has Contractor been engaged in business operations in Syria. Subject to limited exceptions provided in state law, the City will not contract for the provision of goods or services with any scrutinized company referred to above. Submitting a false certification shall be deemed a material breach of contract. The City shall provide notice, in writing, to Contractor of the City's determination concerning the false certification. Contractor shall have five (5) days from receipt of notice to refute the false certification allegation. If such false certification is discovered during the active contract term, Contractor shall have ninety(90)days following receipt of the notice to respond in writing and demonstrate that the determination of false certification was made in error. If Contractor does not demonstrate that the City's determination of false certification was made in error then the City shall have the right to terminate the contract and seek civil remedies pursuant to Section 287.135, Florida Statutes, as amended from time to time. ©2020 ERMProtect All rights reserved.CONFIDENTIAL&PROPRIETARY The content, information,templates and methodologies expressed,embodied and/or utilized herein constitute confidential and proprietary information and/or trade secrets belonging to ERMProtect("ERMProtect")and,except as otherwise expressly authorized in a written agreement with ERMProtect,shall not be disclosed, reproduced,disseminated,transferred or otherwise used in any manner directly or indirectly by any recipient hereof without the prior written permission of ERMProtect. I ginm ERMProtect Cybersecurity Solutions 800 S.Douglas Rd.N940 Coral Gables,FL 33134 Statement of Work Summary DISPUTES Any disputes that arise between the parties with respect to the performance of this Agreement, which cannot be resolved through negotiations,shall be submitted to a court of competent jurisdiction in Palm Beach County, Florida. This Agreement shall be construed under Florida Law. G. Approval If you agree with the provisions of this proposal, please indicate your acceptance by endorsing the signature line below and returning a copy to me via fax number+1-305-447-6752. Do not hesitate to contact me directly should you have any questions or require further information. Thank you once again for the opportunity and your cooperation. ./Zrz,e1 COI For: ERMProtect For: City of Bo •n Beach Print Name: Silka M. Gonzalez Print Name: Lori LaVerriere Date: Date: s/la/iO APPROVED AS TO FORM: CITY ATTTo EY ®2020 ERMProtect All rights reserved.CONFIDENTIAL&PROPRIETARY The content, information,templates and methodologies expressed,embodied and/or utilized herein constitute confidential and proprietary information and/or trade secrets belonging to ERMProtect("ERMProtect")and,except as otherwise expressly authorized in a written agreement with ERMProtect,shall not be disclosed,reproduced,disseminated,transferred or otherwise used in any manner directly or indirectly by any recipient hereof without the prior written permission of ERMProtect.