HomeMy WebLinkAboutContract 53198-A1 CSC No.53198-A1
FIRST AMENDMENT TO
FORT WORTH CITY SECRETARY CONTRACT NO. 53198
This First Amendment to Fort Worth City Secretary Contract No. 53198 ("First
Amendment") is made between the City of Fort Worth ("Fort Worth"), a municipal corporation
and Weaver and Tidwell, L.L.P., a Texas limited liability partnership ("Vendor").
WHEREAS, Fort Worth and Vendor entered into an Agreement identified as Fort Worth
City Secretary Contract No. 53198 beginning December 1, 2019 (the"Agreement"); and
WHEREAS, it is the collective desire of both Fort Worth and Vendor to amend the
Agreement to update the scope of work for the first Renewal Term.
NOW THEREFORE, known by all these present, Fort Worth and Vendor, acting herein
by the through their duly authorized representatives, agree to the following terms, which amend
the Agreement as follows:
1. The Agreement is hereby amended by adding Exhibit A-1, attached to this first
Amendment, as Exhibit A-1 of the Agreement.
2. All other terms, provisions, conditions, covenants and recitals of the Agreement
not expressly amended herein shall remain in full force and effect.
[Signature Page Follows]
OFFICIAL RECORD
CITY SECRETARY
FT. WORTH, TX
First Amendment to Fort Worth City Secretary Contract No.53198 Page 1 of 3
Executed effective as of the date signed by the Assistant City Manager below.
FORT WORTH:
City of Fort Worth Contract Compliance Manager:
By signing I acknowledge that I am the person
responsible for the monitoring and administration
of this contract, including ensuring all performance
By: Valerie wash ington(Dec 1,2D2011:17 CST) and reporting requirements.
Name: Valerie Washington
Title: Assistant City Manager
Dec 1 2020
Date: By: ,7r�tti�r�IattGr�W G`a��
Justin Matthew Grace(Nov 19,2020 09:15 CST)
Name: Justin Grace
Approval Recommended: Title: Sr. IT Solutions Manager
By: O�°FOR?dad Approved as to Form and Legality:
° ° d
Name: Kevin Gunn Aug %OP 00 .
Title: Director, IT Solutions P$o o=d �g Sfra
Q o °a*dd By. JB Strong(Dec ,2020 10:15 CST)
Attest: �aaa°T°°°°°5ap Name: John B. Stroh
g
� ExA d
Title: Assistant City Attorney
By RonaiaP.Gonzaies(Dec1,202013:2 T) Contract Authorization:
Name: Mary J. Kayser M&C: NA
Title: City Secretary Approval Date: NA
1295 Form: NA
VENDOR:
Vendor Name
By: &/*
Name: Briki Thomas
Title: Partner
Date: 11/18/2020
OFFICIAL RECORD
CITY SECRETARY
FT. WORTH, TX
First Amendment to Fort Worth City Secretary Contract No.53198 Page 2 of 3
FORT WORTH
Ir-
City of Fort Worth - PCI SAQ-D Services
Roles
Weaver:Perform testing over the applicable requirements and provide two completed SAQ-D's and AOC's
for Water and Non-water payment channels.
CoFW:Review of the two SAQ-D's and AOC's,provide the requested documentation,and be available for
walkthroughs.
Reauiremenf Scope
Non-wafer payment channel:Requirements outlined in the SAQ P2PE are in-scope.
Wafer payment channel:214 Requirements based on the assumptions outlined below and in the
"Requirement Type Summary'tab.
Timeline:2.5 months
Activity: Low Estimate High Estimate
Non-wafer Payment Channel Hrs Hrs of Rafe Hrs Hrs of Rafe
Planning/Proj Mgmt 20 $ 4,000 30 $ 6,000
Fieldwork Execution&SAQ D Population 40 $ 8,000 60 $ 12,000
Review/Reporting/Issuance 25 $ 5,000 35 $ 7,000
Non-Wafer Payment Channel Total 85 $ 17,000 125 $ 25,000
Water Payment Channel Hrs Hrs at Rate Hrs Hrs at Rate
Planning/Proj Mgmt 40 $ 8,000 50 $ 10,000
Fieldwork Execution&SAQ D Population 190 $ 38,000 230 $ 46,000
Review/Reporting/Issuance 45 $ 9,000 55 $ 11,000
Water Payment Channel Total 275 $ 55,000 335 $ 67,000
Overall Total: 360 $ 72,000 460 $ 92,000
Discounted Rafe: $200
Assumptions(Low Estimate):
1. CoFW will provide accurate data/network flow diagrams and system and device inventories prior to the
issuance of a Document Request List from Weaver.
2. Initial requests for documentation or evidence for testing will be fulfilled within 15 business days(e.g.
populations,inventories,policies,etc.).Subsequent requests for information(e.g.samples for testing,
clarifications on previous requests)will be responded to within 2 business days.All initial requests are provided
prior to the start of fieldwork.
3. For the Non-water payment channel that encrypts cardholder data at the point of interaction and can only be
decrypted by the processor,the applicable requirements outlined in the SAQ-P2PE will be evaluated.See
highlighted green cells in column G of the"Requirement Type Summary"tab for the applicable requirements.
4. For the Water payment channel the applicable SAQ-D requirements will be evaluated.See highlighted green
cells in column F of the"Requirement Type Summary"tab for the applicable requirements.
5. The CoFW has reviewed all"in-scope"requirements in the table"Requirement Type Summary"and agrees that
the applicable requirements are In-Place and documented evidence can be made available to demonstrate
it as such.
6. For both payment channels the following assumptions were made to identify the applicable requirements:
• No cardholder data is retained or stored.All cardholder data is encrypted at the Point of Interaction(POI)
or Point of Sale(POS)and the CoFW only retains tokenized transaction information received from the
processor.
• All applications are off the shelf and no custom code development is performed for the CDE.
• SSL and early TLS are not utilized for encryption.
7. The city has performed scans of their networks and systems for cardholder data and can provide
documentation demonstrating no cardholder data exists.
8. The Water cardholder data environment is fully segmented from other networks and systems.
9. Issues identified in prior assessments have been remediated and in place for any required periods of time.
Assumptions(High Estimate):
1. Not all"in-scope"requirements in the table"Requirement Type Summary"have been implemented,requiring
multiple rounds of follow-up between the CoFW and Weaver.
2. Provided documentation is inaccurate or does not fully address the request or requirement.
weaver>-