Loading...
HomeMy WebLinkAboutContract 37427CITY 0f CRETARY CONTRACT `� N`O. 3� a� LIMITED ACCESS AGREEMENT This LIMITED ACCESS AGREEMENT ("Agreement") is made and entered into by and between the CITY OF FORT WORTH ("City"), a home rule municipal corporation organized under the laws of the State of Texas and situated in portions of Tarrant, Denton and Wise Counties, Texas, and CA, INC., hereinafter ("Contractor"), a Delaware corporation. The following statements are true and correct and form the basis of this Agreement: WHEREAS: A. The City owns and operates a file server computer system and network (collectively the "Network"). Contractor wishes to have access to the City's network. B. Contractor wishes to perform activities as defined in The Statement of Work dated April 18, 2008 titled CA Spectrum and eHealth Implementation and as provided for in City Secretary Contract No. 37011, together with any amendments, appendixes or future statement(s) of work. C. In order to perform the necessary duties, Contractor needs access to City's 1) local administrator rights or an IT rep to provide access to the local systems; 2) Community strings for SNMP with e-mail accounts to send critical events; 3) E-mail account installed on the server for Outlook; 4) Internet access via DSL. D. The City is willing to grant Contractor access to the Network, subject to the terms and conditions set forth in this Agreement, and in the City's standard outside connections policy, ("Extranet Standard") attached as Exhibit "A" and hereby incorporated by reference and made a part of this Agreement for all purposes herein. NOW, THEREFORE, the City and Contractor hereby agree as follows: 1. GRANT OF LIMITED ACCESS. E. Contractor is hereby granted a limited right of access to the City's Network for the sole purpose of 1) local administrator rights or an IT rep to provide access to the local systems; 2) Community strings for SNMP with e-mail accounts to send critical events; 3) E-mail account installed on the server for Outlook; 4) Internet access via DSL. Contractor can only enter the Network via the City's computer system; therefore, the City will provide Contractor with a password and access number or numbers as necessary to perform Contractor's duties. 2. NETWORK RESTRICTIONS. 2.1. Contractor may not share any passwords or access number or numbers provided by the City except with Contractor's officers, agents, servants or employees who work directly with this project. 2.2. Contractor may not access the Network for any purpo.se. se set forth in Section B of this Agreement. OFFICIAL RECORD CITY SECRETARY , FT. WORTHTX -���,n 2.3. Contractor acknowledges, agrees and hereby gives its authorization to the City to monitor Contractor's use of the City's Network in order to ensure Contractor's compliance with this Agreement. 2.4. A breach by Contractor, its officers, agents, servants %J employees, of this Agreement and any other written instructions or guidelines that the City provides to Contractor pursuant to this Agreement shall be grounds for the City immediately to deny Contractor access to the Network and Contractor's Data in addition to any other remedies that the City may have under this Agreement or at law or in equity. 2.5. The City may terminate this Agreement at any time and for any reason. 3. LIABILITY AND INDEMNIFICATION. SUBJECT TO THE LIMITATION OF LIABILITY SET FORT BELOW, CONTRACTOR SHALL BE LIABLE AND RESPONSIBLE FOR ALL DAMAGES THAT THE CITY MAY INCUR D/RECTL Y ON ACCOUNT OF ANY BREACH OF THIS AGREEMENT BY CONTRACTOR, ITS OFFICERS, AGENTS, SERVANTS OR EMPLOYEES. NOTWITHSTANDING THE FOREGOING, IN NO EVENT WILL CONTRATOR'S LIABILITY, EITHER IN CONTRACT OR IN TORT, EXCEED THE FEES PAID FOR THE SERVICES UNDER THE STATEMENT OF WORK THAT GAVE RISE TO THE LIABILITY. THE CITY, ITS OFFICERS, AGENTS, SERVANTS AND EMPLOYEES, SHALL NOT BE LIABLE FOR ANY DAMAGES THAT CONTRACTOR MAY INCUR AS A RESULT OF THE CITY'S RESTRICTIONS TO OR DENIAL OF ACCESS TO CONTRACTOR'S DATA ON ACCOUNT OF ANY BREACH OF THIS AGREEMENT BY CONTRACTOR, ITS OFFICERS, AGENTS, SERVANTS OR EMPLOYEES, OR FOR ANY REASONABLE SECURITY MEASURES TAKEN BY THE CITY. IN ADDITION, CONTRACTOR SHALL BE LIABLE AND RESPONSIBLE FOR ANY AND ALL TANGIBLE PROPERTY LOSS, TANGIBLE PROPERTY DAMAGE AND/OR PERSONAL INJURY, INCLUDING DEATH, AND ALL CLAIMS, DEMANDS AND JUDGMENTS THEREFOR, TO THE EXTENT CAUSED BY THE NEGLIGENT ACT(S) OR OMISSION(S) OR INTENTIONAL MISCONDUCT OF CONTRACTOR, ITS OFFICERS, AGENTS, SERVANTS AND/OR EMPLOYEES. CONTRACTOR, AT CONTRACTOR'S OWN COST OR EXPENSE, HEREBY AGREES TO INDEMNIFY, DEFEND AND HOLD HARMLESS THE CITY, ITS OFFICERS, AGENTS, SERVANTS AND/OR EMPLOYEES FROM AND AGAINST ANY CLAIM, LAWSUIT, DEMAND OR OTHER ACTION TO THE EXTENT THAT THE SAME ARISES FROM THE NEGLIGENT ACT(S) OR OMISSION(S) OR INTENTIONAL MISCONDUCT OF CONTRACTOR, ITS OFFICERS, AGENTS, SERVANTS OR EMPLOYEES. 4. UNUATHORIZED ACCESS. Contractor, for itself and its officers, agents and employees, agrees that it shall treat all information to which it is given access, or information that is provided to it by the City as confidential and shall not disclose any such information to a third party without the prior written approval of the City. Contractor shall only access City Information in a secure manner and shall not allow unauthorized users to view, access, modify, delete or otherwise corrupt City Information in any way. Contractor shall notify the City immediately if the security or integrity of any City information has been compromised or is believed to have been compromised. 5. AGREEMENT CUMULATIVE. This Agreement is cumulative of and in addition to any written contracts, agreements, understandings or acknowledgments with the City signed by Contractor. To the extent that any term or condition of this Agreement conflicts with any term or condition of City Secretary Contract No. 37011, City Secretary Contract No. 37011 shall control. 6. ENTIRE AGREEMENT. The terms of this Agreement shall not be waived, altered, modified, supplemented, or amended in any manner except by written instrument signed by an authorized representative of both the City and Contractor. This Agreement and any other documents incorporated herein by reference constitute the entire understanding and Agreement between the City and Contractor as to the matters contained herein regarding Contractor's access to and use of the City's Network. The signature below of an authorized representative acknowledges that the Contractor has read this Agreement and agrees to be bound by terms and conditions set forth herein. IN WITNESS WHER,�OF, the parties hereto have executed this Agreement on this day of l , 20 u CITY OF FORT WOR/T}H:/ By: Lee.0 --- Assistant City Manager Date: 'Zoe 0 By: City Secretary Date: Assistant FORM AND LEGALITY: ney CONTRACTOR: Name of Contractor Authorized Signature OFFICIAL RECORD CITY SECRETARY 3 FT. WORTH, TX EXHIBIT "A" EXTRANET STANDARD Overview The purpose of this standard is to establish the requirements under which third party organizations may connect to the City of Fort Worth networks for the purpose of transacting City business. The standards listed are specific activities required by Section 2.2 of the City of Fort Worth Information Security Policy. Scoae Connections between third parties that require access to non-public City of Fort Worth resources fall under this standard, regardless of whether a telecommunications circuit (such as frame relay or ISDN) or Virtual Privacy Network (VPN) technology is used for the connection. Connectivity to third parties such as the Internet Service Providers (ISPs) that provide Internet access for the City of Fort Worth or to the Public Switched Telephone Network do not fall under this standard. Standard Security Review All new extranet connectivity will go through a security review with the Information Security department (IT Solutions). The reviews are to ensure that all access matches the business requirements in a best possible way, and that the principle of least access is followed. Third Party Connection Agreement All new connection requests between third parties and the City of Fort Worth require that the third party and the City of Fort Worth representatives agree to and sign a third party agreement. This agreement must be signed by the Director of the sponsoring organization as well as a representative from the third party who is legally empowered to sign on behalf of the third party. The signed document is to be kept on file with IT Solutions. All documents pertaining to connections into the City of Fort Worth labs are to be kept on file with IT Solutions. Business Case All production extranet connections must be accompanied by a valid business justification, in writing, that is approved by a project manager in IT Solutions. Lab connections must be approved by IT Solutions. Typically this function is handled as part of a third party agreement. The sponsoring organization must designate a person to be the Point of Contact (POC) for the Extranet connection. The POC acts on behalf of the sponsoring organization, and is responsible for those portions of this policy and the third party agreement that pertain to it. In the event that the POC changes, IT Solutions must be informed promptly. Establishing Connectivity Sponsoring organizations within the City of Fort Worth that wish to establish connectivity to a third party are to file a new site request with IT Solutions to address security issues inherent in the project. If the proposed connection is to terminate within a lab at the City of Fort Worth, the sponsoring organization must engage IT Solutions. The sponsoring organization must provide full and complete information as to the nature of the proposed access to the extranet group and IT Solutions, as requested. All connectivity established must be based on the least -access principle, in accordance with the approved business requirements and the security review. In no case will the City of Fort Worth rely upon the third party to protect the City of Fort Worth's network or resources. Modifying or Changing Connectivity and Access All changes in access must be accompanied by a valid business justification, and are subject to security review. Changes are to be implemented via corporate change management process. The sponsoring organization is responsible for notifying IT Solutions when there is a material change in their originally provided information so that security and connectivity evolve accordingly. Terminating Access When access is no longer required, the sponsoring organization within the City of Fort Worth must notify IT Solutions, which will then terminate the access. This may mean a modification of existing permissions up to terminating the circuit, as appropriate. IT Solutions must conduct an audit of their respective connections on an annual basis to ensure that all existing connections are still needed, and that the access provided meets the needs of the connection. Connections that are found to be deprecated, and/or are no longer being used to conduct the City of Fort Worth business, will be terminated immediately. Should a security incident or a finding that a circuit has been deprecated and is no longer being used to conduct the City of Fort Worth business necessitate a modification of existing permissions, or termination of connectivity, IT Solutions will notify the POC or the sponsoring organization of the change prior to taking any action. Definitions Circuit: For the purposes of this policy, circuit refers to the method of network access, whether it's through traditional ISDN, Frame Relay etc. or via VPN encryption technologies. Sponsoring Organization: The City of Fort Worth organization that requested that the third party have access to the City of Fort Worth network. Third Party: A business that is not a formal or subsidiary part of the City of Fort Worth. • ,• • ; COUNCIL ACTION: Approved on 3/25/2008 DATE: Tuesday, March 25, 2008 LOG NAME: 13P08-0070 REFERENCE NO.: **P-10759 SUBJECT: Authorize an Agreement with CA, Inc., for Professional Implementation, Software Licenses and Maintenance and Support Services Utilizing the SHI-Government Solutions Contract with the State of Texas Department of Information Resources Contract for the Water Department RECOMMENDATION: It is recommended that the City Council authorize an agreement with CA Inc., for professional implementation, software licenses and maintenance and support services utilizing the SHI-Government Solutions Contract with the State of Texas Department of Information Resources (DIR) for the Water Department. DISCUSSION: The Water Department currently utilizes network monitoring software and components that support the H T E web -billing module (H2Online), Maximo, Computerized Maintenance Management System (CMN1S), and Peoplesoft Customer Relationship Management (CRM). These applications make up the Mission Critical Systems. This software and its components are no longer supported. After assessments by the Water IT staff, it was determined that the Water Department should upgrade the network monitoring solution to the new software platform provided by CA Inc. After extensive review of a number of different vendors monitoring products, it was determined that CA Inc., will perform these services through DIR Contract No. DIR-SDD-198 in the amount of $366,460.00 to be paid in three installments. Payment will be made to SHI-Government Solutions Inc., an authorized order fulfiller for CA Inc: Year One: $187,686.00 for licensing and professional services, and Years Two and Three for $89,387.00 annually for maintenance and support. Travel and expenses for CA shall not exceed $10, 000.00. DIR is authorized to offer the cooperative purchasing program to state agencies, public institutions of higher learning, public school districts and local governments. Pursuant to Government Code Section 2054.0565 (b), a political subdivision that purchases goods and services under a DIR contract satisfies otherwise applicable competitive bidding requirements. This recommendation will allow the City to benefit from the DIR contract that has already been competitively bid. AGREEMENT TERMS —The term of this agreement shall be for one year. RENEWAL OPTIONS -The maintenance and support may be renewed per the conditions established in the contract between DIR and the individual vendor for two additional one-year terms at the City's option. If the DIR enters into a new contract with an individual vendor, then the option terms established by the new contract will be the term the City follows. This action does not require specific City Council approval provided that the City Council has appropriated sufficient funds to satisfy the City's obligation during the renewal term. Logname: 13P08-0070 Page 1 of 2 FISCAL INFORMATION/CERTIFICATION: The Finance Director certifies that funds are available in the current operating budget, as appropriated, of the Water and Sewer Fund. BQN\08-0070\LAS TO Fund/Account/Centers FROM Fund/Account/Centers PE45 539120 0604012 PE45 539120 0704012 Submitted for City Manager's Office bv: Karen Montgomery (6222) Originating Department Head: Lena Ellis (8517) Additional Information Contact: Jack Dale (8357) $93,843.00 $93,843.00 Logname: 13P08-0070 Page 2 of 2