HomeMy WebLinkAboutContract 53198-R2 CSC No.53198-R2
CITY OF FORT WORTH
CONTRACT RENEWAL NOTICE
May 19, 2022
Weaver and Tidwell LLP
Attn: Legal Department
24 Greenway Plaza, Suite 1800
Houston, TX 77046
Re: Contract Renewal Notice
Contract No. CSC No. 53198 (the "Contract")
Renewal Term No. 2: December 10, 2021 to December 9, 2022
The above referenced Contract with the City of Fort Worth expired on December 9, 2021
(the "Expiration Date"). Pursuant to the Contract, contract renewals are at the sole option of the
City. This letter is to inform you that the City is exercising its right to renew the Contract for an
additional one (1) year period, which will begin immediately after the Expiration Date. All other
terms and conditions of the Contract remain unchanged. Please return this signed
acknowledgement letter and current insurance certificate, to the address set forth below,
acknowledging receipt of the Contract Renewal Notice.
To ensure that your company information is correct and up-to-date, please log onto PeopleSoft
Purchasing at https://www.fortworthtexas.gov/departments/finance/purchasing.
If you have any questions concerning this Contract Renewal Notice, please contact me at
the telephone number listed below.
Sincerely,
Kathy Agee-Dow
Sr. Contract Compliance Specialist
200 Texas Street
Fort Worth, TX, 76102
Kathryn.Aee-Dow(a�fortworthtexas. og_v
(817)392 - 8461
OFFICIAL RECORD
CITY SECRETARY
FT. WORTH, TX
Contract Renewal Page 1 of 2
[Executed effective as of the date signed by the Assistant City Manager below.] / [ACCEPTED
AND AGREED:]
City: Vendor:
By: Valerie Washington(May 26,2022 14:37 CDT) By.
Name: Valerie Washington Name: Brittany George
Title: Assistant City Manager Title: Partner
Date: May 26,2022 Date: 5/19/22
CITY OF FORT WORTH INTERNAL ROUTING PROCESS:
Approval Recommended: Contract Compliance Manager:
By signing I acknowledge that I am the person
responsible for the monitoring and administration
of this contract,including ensuring all
By: performance and reporting requirements.
Name: Kevin Gunn
Title: Director, IT Solutions Q
By: 0
Approved as to Form and Legality: Name: Justin Grace
Title: Sr. IT Solutions Manager poovFpRrv�a
By: City Secretary: ��j0 .X
Name: Taylor Paris d�� o a*
Title: Assistant City Attorney da °°°°°°°°°0 a
a�nExASaA'
By: JannetteS.Goodall(May 27,202207:17CDT)
Contract Authorization: Name: Jannette Goodall
M&C: N/A Title: City Secretary
OFFICIAL RECORD
CITY SECRETARY
FT. WORTH, TX
Contract Renewal Page 2 of 2
FOR? WORTH
City of Fort Worth - PCI SAQ-D Services
Roles
Weaver:Perform testing over the applicable requirements and provide two completed SAQ-D's and AOC's for
Water and Non-water payment channels.
CoFW:Review of the two SAQ-D's and AOC's,provide the requested documentation,and be available for
walkthroughs.
Reauirement Scone
Non-water payment channel: Requirements outlined in the SAQ P2PE are in-scope.
Water payment channel:214 Requirements based on the assumptions outlined below and in the"Requirement
Type Summary"tab.
Timeline:2.5 months
Activity: Low Estimate High Estimate
Non-water Payment Channel Hrs at Rate Hrs at Rate
Planning/Proj Mgmt $ 3,000 $ 5,000
Fieldwork Execution&SAQ D Population $ 8,000 $ 11,000
Review/Reporting/Issuance $ 5,000 $ 7,000
Non-Water Payment Channel Total $ 16,000 $ 23,000
Water Payment Channel Hrs at Rate Hrs at Rate
Planning/Proj Mgmt $ 6,000 $ 8,000
Fieldwork Execution&SAQ D Population $ 35,000 $ 42,000
Review/Reporting/Issuance $ 9,000 $ 11,000
Water Payment Channel Total $ 50,000 $ 61,000
Overall Total: $ 66,000 $ 84,000
Assumptions(Low Estimate):
1. CoFW will provide accurate data/network flow diagrams and system and device inventories prior to the issuance of a
Document Request List from Weaver.
2. Initial requests for documentation or evidence for testing will be fulfilled within 15 business days(e.g.populations,
inventories,policies,etc.).Subsequent requests for information (e.g.samples for testing,clarifications on previous
requests)will be responded to within 3 business days.All initial requests are provided prior to the start of fieldwork.
3. For the Non-water payment channel that encrypts cardholder data at the point of interaction and can only be
decrypted by the processor,the applicable requirements outlined in the SAQ-P2PE will be evaluated.See highlighted
green cells in column G of the"Requirement Type Summary"tab for the applicable requirements.
4. For the Water payment channel the applicable SAQ-D requirements will be evaluated.See highlighted green cells in
column F of the"Requirement Type Summary"tab for the applicable requirements.
5. The CoFW has reviewed all"in-scope"requirements in the table"Requirement Type Summary"and agrees that the
applicable requirements are In-Place and documented evidence can be made available to demonstrate it as such.
6. For both payment channels the following assumptions were made to identify the applicable requirements:
• No cardholder data is retained or stored.All cardholder data is encrypted at the Point of Interaction (POI) or
Point of Sale(POS) and the CoFW only retains tokenized transaction information received from the processor.
• All applications are off the shelf and no custom code development is performed for the CDE.
• SSL and early TLS are not utilized for encryption.
7. The city has performed scans of their networks and systems for cardholder data and can provide documentation
demonstrating no cardholder data exists.
8. The Water cardholder data environment is fully segmented from other networks and systems.
9. Issues identified in prior assessments have been remediated and in place for any required periods of time.
Assumptions(High Estimate):
1. Not all"in-scope"requirements in the table"Requirement Type Summary"have been implemented,requiring multiple
rounds of follow-up between the CoFW and Weaver.
2. Provided documentation is inaccurate or does not fully address the request or requirement.
weaver