HomeMy WebLinkAboutContract 28570'-� . ' .�:Vi)
�Ro��ssEo��►� ����i���_�����nn� iTY ��C���A�� � ,
- - - �- -- � -,�n�TR�Ci � � . .�. .� ?C �
This PRO�'ESSIONAL. SERVICES AGREEMENT {"Agreement") is made and
entered into by and between the CI�'Y 8� �0��' 1rVO�iH {the °City"), a home rule
municipal corporation situated in portions of Tarran�, Denton and Wise Counties,
Texas, acting by and through Libby Watson, its duly authorized Assis�an� City
Manager, and S�CUR� COI�fi�I�RC� SYS`��flAS {"Consultan�") a Texas corporation
and act�ng by and througi� Ron Newman, its duly authorizec{ Chief Operafions O�ficer.
1. SCO�� O� 5��1/1C�S.
Consultant hereby agrees ta provide the City with professional consulting
services. Such services are providing assistance i� addressing network security
vulnerability and developing and implemer�ting a security policy. Attached hereto and
incorporated for all purposes incident to this Agreement is Exhibit A c#escribing the
scop� af work.
2. i��l�.
This Agreemer�t shall commence upon April 8, 2003 and �erminate October 31,
20Q3.
3. COM��NSATI�N.
The City shall pay Consultant an amount of $75,600.00 �lus expenses per
Exhibit B, also incorporated hereby for all purposes incident hereto, in accordance with
the provisions of this Agreement. Consultant shall not perForm any addi#ional services
for the Gity not specified by this Agreement Unless the Cify requests and appro�es in
writing #he additional costs for such services. The Gity shall nof be liable for any
addit�onal expenses of Consultant not specified by this Agreement unless the City first
appro�es such expenses in writing.
4. T�RN�INAiION.
4.1�. VWritten Notice.
The Cify or Consultant may terminate this Agreement at any time and for
any reason by its pro�iding the other party with 30 days' written notice of
termination.
v�'���'� Jiti� ���1�1�i�
� ��� ���������
��, �'����, ���. ,
4.2 Non-appropriation ofi Funds.
In the e�ent no funds or insufficient funds are appropria#ed by the Gity in
any fiscal period for any payments due hereunder, City will notify Consultant of
such occurrence and this Agreement shafl terminate on the last day of t�e fiscal
period for which appropriatians were received without penalty or expense to the
City of any kind whatsoever, except as to the poriions of the payments herein
agreed upon for which funds sha11 be been appropriated.
4.3 Duties and Ob�igations of the Parties.
1n fihe event that this Agreemen� is terminated prior to #h� Expiration
Date, the Cit�r shall pay Consultant for services actually rendered as of the
effecti�e date of �ermination and Consultant sha11 continue to pro�ide the City
with services requested by the City and in accordance with this Agre�ment up
to the effecti�e da#e of termination.
�. �[�CLOSURF O� �BiV��ICiS RI�D COfV�IQ�i�il�4 IIdFAFZ1l�ATlO�'.,
Consultant hereby warrants tp the City that Consultant has made full discfosure
ir� writing of any existing or potential conflicts of interest rela�ed to Consultant's
services and proposed services with respect #o fhe Scope of Senrices. In the event
that any con�licts of in�erest arise after the Effeciive Date of this Agreement,
Consul�ant hereby agrees immediately to make ful! d�sclosure to �he City in writing.
Cansuitant, for itself and its c�fficers, agents and employees, furkher agrees that it shall
treat all information provided to it by the City as confidential and sF�a11 not disclose any
such information to a third par�y without the prior written approval of fhe City.
fi. �IGWi 'f0 AIJDIY.
Consulfant agrees that the City s�all, until the exp�ration of three (3) years after
final paymenf under this contract, ha�e access to and the right �o examine at
reasonable times any directly per�inent books, documen�s, papers and records of the
cons�ltant in�olving trar�sactians relating to this Contract. Consuftant agrees that fihe
City shall ha�e access during normal working hours to all necessary Consultant
facilities and sha11 be provided adequate and appropriate work space in order to
conduct audits in compliance with the pro�isions of this section. The City shall give
Consultant reasanable ad�ance notice af intended audits.
Consultant further a�rees to include in alf its subcontractor agreements
hereunder a provision to the effect t�at the subcontractor agrees that the City shall,
until expiration of three (3) y�ars after final payment of the subcontract, ha�e access
fo and �he right to examine a# reasanable times any directly pertinent books,
document�, papers and records of such subcontractor involvir�g transactions related to
the subcontract, and furtner that City shall have access during normal warking hours
to all subcontractor facilities and shall be pro�ided adequate and appropriate work
2
space in order to conduct audits in compliance with the provisions of ih�s paragraph.
City shafl give subcontractor reasonable natice of intended audifs.
i. iR�DI���ND�1V� �ON��CiOR.
It is expressly understood and agreed that Consultant s�all operate as an
independent contractor as to all rights and privileges granteci herein, and not as agent,
representative or �mployee of the City. Subject to and in accordance with the
conditions and provisions af this Agreement, Consultant shall ha�e the exclusive right
fo control the defails ofits operatians ar�d activities and be salely responsible for the
acts and omissions of its officers, agents, servants, employees, cantractors and
subcontractors. Consultant acknowledges that the doctrine of respondeaf super�or
shall not apply as betwe�:n the City, its officers, agents, servants and employees, ant�
Consultant, its officers, agents, employees, seruants, co�traetors and subconfiractors.
Cansul#ant further agrees that nothing herein shall be consfrued as the creation af a
par�nership or joini enterprise be#ween City and Consultant.
�. �I.�►�I�,[TY AfdD IIVD�1VIiVI�I�AilOfd.
CONSULTANT SHALL BE LIABLE AND RESPONSIBLE FOR ANY AND ALL
PROPERTY LOS5, PROPERTY DAMAGE ANDIOR PERS4NAL INJURY,
INCLUDIf1[G DEATH, TO ANY AND ALL PERSONS, OF ANY KlND OR CHARACT�R,
WHETNER REAL �R ASSERTED, TO THE EXTENT GAUSED BY THE NEGLIGENT
ACT(SJ OR OMISSION(S}, MALFE�4SANCF OR INTENTl�NAL MISCONDUCT OF
CONSUL7ANT, ITS OFFICERS, AGENTS, SERVANTS OR EMPLOYEES.
CONSUL7"ANT COVEIVANTS AIVD AGRE�'S TO, AND DOES HEREBY,
1NDEMNIFY, HOLD HARMLESS AND DEFEND THE CITY, ITS OFFICERS,
AGENTS, SERVANT'S AND EMPLOYEES, FROM AIVD AGAINST ANY AND ALL
CLAIMS OR LAWSUITS FOR EITNER PROPERTY DAMAGE �R LOSS
(INCLUDING ALLEGED DAMAGE OR LOSS 70 CONSULTANT`S BUSINESS AND
ANY RESUL7ING LOST PROFITS) ANDIOR PERSONAL lNJURY, 1NCLUDING
DEA7H, TO ANYAND ALL PERSONS, OF ANY KIND OR CHARACTER, WHETHER
REAL OR ASSER7ED, ARISING OUT OF OR !N CONNECTION WITH TH�S
AGREEMENT, T� TNE EXTENT CAUSED BY THE NEGLIGENT ACTS OR
OMISSfOIVS OR MALFEASANCE OF CONSULTANT, ITS OFFlCERS, AGE11lTS,
SERVAIVTS OR EMPLOYEES.
9. A�SIGNfl��NT AND SU�CB[V��Ci11�C.
Consultant shaEl not assign or subcontract any of its duties, obligatior�s or rights
under this Agreement without the prior written consenf of the City. lf the Cify grants
such consent, the assignee or subcontr�ctor shall execute a written agreement with the
City under which the assignee or subcontrac#or agrees to be bound by the duties and
obligations of Cor�sultant under this Ag�eement.
10. COAA��I�R�C� l�liH LAl�S. B��IW�P�CES. RULI�S AIV� RECU�eiION�.
Consultant agrees to camply with all federal, state and local laws, ordinances,
rufes and regulations. If the City notifiies Consultant of any violation of such laws,
ordinances, rules or regufations, Consultanf shall immediately desist from and carrect
the viaiation.
11. f�ON��ISC�#IAIYIN►�►iIOI� C�V�N�►A1 I .
Consultant, for itself, its personal representati�es, assigns, subcontracfiors and
successors in interest, as part of the eonsideratEon herein, agrees that in the
performance of Consultant's duties and obligations hereunder, it shall not discriminate
in the treatment or employment of any indi�idual or group af individuals an any basis
prohrbited by law. Ifi any claim arises from ar� alleged �iolatian of this non-discrimination
co�enant by Cons�lfiar�f, its personal representatives, assigns, subcantractors ar
successors in inferest, Cansulfiant agrees to assume such liability and to �ndemnify and
defend the Ciiy and hold the Ciiy harmless from such claim.
9 �. P�OiI�I�S.
Notices required pursuant to the pro�isions of this Agreement shall be
conclusively defermined �o have be�n delivered when {1} hand-deli�ered to the other
party, its agents, employees, servants or represenfiatives, (2} delivered by facsimile
with electror�ic confirmation of the transmission, or (3} recei�ed by the other party by
Uniteci States Mail, registered, return receipt requested, addressed as follows:
To THE CITY:
City of Fort WorthI1T 5olutions
1000 Throckmo�ton
Fart Worth TX 76102�6311
To CONSULTANT:
5ecure Commerce Systems
17225 EI Camina Real, Suite 34Q
Houston, TX 77058
Facsimile: (817} 871-8654
Facsimiie: (281) 286-2607
4
� 3. S��I�li�i{OR� OF �IR�PLOY�I�S.
Neither the City nor Consulta�t shall, during the term of this agreement and
additionally a period of one year after its terminat�on, solicif for employment or emplay,
whether as employee or independent contractor, any person w�o is or has been
employed by the other during the term of this agreement, without the prior written
consent of the person`s employer,
14. G8l���R��II�R�iAL �OW�R�.
It is undersfood and agreed that by execution of this Agreement, th� City does
no� wai�e or surrende� any of ifs gove�nmental powers.
'I�. fVO1�11�IVEFi.
The failure of �he City or C+onsultanf to insist upon the performance of any t�rm
or pro�ision of this Agreement or to exerc�se any right granted herein shall not
constitute a wai�er of the City's or Consultant's respecti�e right to insist upon
appropriate performance or fa assert any such rigfi�t on any future occasion.
R6. COf�STRUCYIDfV.
This Agreement shall be construed in accordance with t}�e �ntemal laws of the State of
Texas. If any action, whether rea! or asserted, at law or in equity, is brought on the
basis af this Agreement, �enue for such action shall lie in state courts �ocated in Tarrant
County, Texas or the United Sfates DistriCt Court for the Norfhern District of Texas, Fort
Vllorth Di�isian.
17. 5�11���ILITY.
!f any provision ofi this Agreement is helc� ta be
the validity, legality and enforceability of the remaining
be affected or impaired.
1�. ��FtC� flll�eJ�U��.
invalid, illegal or unenforceable,
provisions shal[ not in any way
The City and Consultant shall exercis� their best efforts to meet their respecti�e
duties and abl�gations as set forth in this Agreement, but shall not be held liable for any
delay or omission in perFormance due to force majeure or other causes beyond their
reasonahle control (force majeure), �ncluding, but not limified to, campliance with any
government law, ordinance or regulation, acts of God, acts of the public enemy, fires,
strikes, lockauts, natural disasters, wars, riots, material or labar restrictions by any
governmen#al authority, transportatian problems andlor any other simifar causes.
19. FI��►DINGS iVe� COP�iROLLING.
Headings and titles used in �his Agreemenf are far reference purposes onfy and
shall not be deemed a part of this Agreement.
20. FtEl�I�� O� C�U[����.
The parties acknowledge that each party and its counsel ha�e re�iewed and
re�ised this Agreement and that the normal rules of constructron to #he effect that any
ambiguities are to be resolved against the drafting �arty shal[ nat be employed in the
interpretation af this Agreement or exhibi�s hereto.
��. �R�ilFt�iY OF /�����fll��PlT.
This Agreement, including the schedule of exhibits attached hereto and any
docum�nts incorporated her�in by reference, con�ains the en#ire und�rstanding and
agreement between fhe City and Consultant, their assigns and successors in interest,
as fo the matters contained herein. Any prior or contemporaneous oral or written
agreement is hereby declared null and void to the extent in conflict with any pro�isian
of this Agreement.
IN WITNESS WHEREOF, the parties hereto have executed this Agreement in
multiples this , day of I+:� �.�, , 2003.
CfTY OF FORT 1�JORTH:
SEGURE COMMERCE SYSTEMS
By. � � _ � , _ _
Lil�by�atson '
Assistant City Manager
ATTEST:
-�=,A � Y _ .
By: , � � � .�.. �
City Secretary,� �r
�
�� Ra �����,'�`�����.
� F�� ���4'� hk�
ty At v � iira ��
� �. ';��,F:�)'���� ���,
� �� .
Bjl: r -
Ron Newman
Chief Operations Officer
ATTEST:
:
�
�-g��r
���►�r� t �ut�ioxi��ti�n
� �:. _- -
��� .�� �
����
-, :�� 6
I�?�HI�IT r4
�C�P� 8� I���K
Secure Commerce Systems is pleased to propose assistance to the Cify of For# Worth
in addressing the recommendations made in the document "Network Security &
Vulnerabifity Assessment Report," dated December 16, 2002.
9. Scope of N!lork
The scope for these security consulting services will be the information systems
admin�stered by #he IT Solutions organization within �he City of �ort Wor�h.
A Secure Commerce 5ysf�ms senior security consuitant will perform #asks in support of
a focused set of security initiaiives intended to address specif'rc deficiencies in the Gity
of Fort Worth security posture. Security posture de#iciencies were identified in fhe
Secure Commerce 5ystems security vulnerability assessment repart delivered in
Decemb�r 2002 and in discussions with City of Fort Workh personnel since that time,
The focused set of security inifiia#i�es will be based on Sec�re Gammerce Systems'
enterprise security methadalogy, depicted in the foilnwing figure.
The fiigure graphically illustrates that successful implementation of the security
initiati��s depends on their being performed in the proper arder. The success of each
initiati�e depends on the successful completion af the initiatives that precede it. Secure
Cammerce Systems proposes that the security initiatives t�e pursued in the following
order:
a. Security lnitiative Group �
S�curity initiative Group 1 consists of tasks that n�ed to be completed firsi and as soan
as possible:
2. 9. Securify Vulnerability Remediation
Work wil[ be perFormed to correct security vulnerabilifiies identified in the December
2002 security assessment report. High and medium risfc vulnerabili�ies will be resoived
for systems and supervision of RACF remediation wiH be provided. Resolution of
discovered vulnerabilities will be resaived wit�in tf�e City cF�ange management
procedures program and documented accordingly.
Secure Commerce Systems will pertorm the following work:
� Working wifh Cify techn�cal persor�nel, the Secure Commerce Systems
consultant will deveEop a strategy document for the remediatio� wor[c to be
performed. This strategy will include a schedule of steps that need to be ta�cen, a
description of what is required for each step, and plans for handling issues that
have be+en identified.
� The Secure Commerce Sys#�ms consuftant wfll pro�ide 10% of his time for
supervis�on ancf consulting on the remec�iation work that will be done over an 8-
weel� period.
Deliverables:
� Network securi#y vulnerability remediation strategy document
2.2 Securify Polrcy
Work will be performed to develop a documented, centra[ized security policy �hat �vill be
approved by the City Manager. A security policy will assist various City depar�menfs,
such as HR and Legal, in enforcement of infarmafion security and in halding empfoyees
accountable for their actions. A security policy will assist the City in achieving
compliance with various regulations, such as HIPAA and Homeland Securifiy. A security
policy will assis# the City in attaining a more secure i�formation technology
infrasiructure and provide an audit document against which future assessments may be
made.
Secure Commerce Systems will perform the following work:
• Working with City personnel, the Seeure Commerce Systems consultant will
develop a strategy document for the security policy de�elo�ment, re�iew, and
appro�al work to be performed. This strategy will include a schedule of sfeps that
need to be taken, a description of what is required for each step, and plans for
handling issues tha# hav� been identified.
2
The Secure Commerce Systems consultant will draft an inifial security palicy
template to accompany the strategy document.
The Secure Commerce Systems consultant wil! draft an ini�ial, complete security
policy for re�iew and approval by the City Manager and other personnel ar�d
organizations, as identified in the strategy.
Working with City personnel, the Secure Commerce Systems consul�anfi will
shepherd the �ecurity policy through the review and approvai process.
Deliverables:
o Security policy de�elopment and approval strategy documenf
• Security policy temp{ate document
o Completed and approved securifiy policy document
3. Security Initraiive Group a
Security Initiaiive Group 2 consists of tasks that are dependent upon completion and
approval of the s�curity policy from Group 1:
3. � Secur�fy Sfandards & Guidelines
Work will be perFormed to develop enfe�-prise-wide security standards and guidelines for
implementing the appro�ed security policy. Standards and gui�elines are critical
components to the successful implementation af a security policy, and they include
documents specifying security Best Practices and standards for cryptography,
authentication, and profocols.
5ecure Commerce Systems will perfarm the follawing work:
WorKing with City personnel, the Secure Commerce Systems consultant will
de�elop a strategy document for the security standards and guidelines
develo}ament anci re�iew work to be performed. This straf�gy will include a
schedul� of steps that neec� to be taken, a description of what is required for
each step, and plans for handling issues tF�at ha�e been identified.
The Secure Commerce Systems consultant wili draft initial, compl�te security
standards and guidelines documents for re�iew with other personnel and
organizations, as identified in ihe strategy.
Deliverables:
� Security standards and guidelines documents de�elopment and re�iew strategy
docu ment
+ Completed security standards and guid�lines documents
3. 2 IVefwork Securify Archrtecture
Work on this initiati�e wilf not be included in the scope of this contracf.
Work should be performed to review the current network security architecfur� and to
deve[op a plan for creating a neiwork security arcF�itecture that properly implements the
approved s�curity policy, Installation of additional technical controls, such as new
security firewalls, may be r�quired as a result of the approved sec�arity policy, and all
such changes should be incorporated into the plan document.
�. Securify 1`nifiagive Group 3
Security [nitiative Gro�ap 3 consists of tasks that are dependent upon complefiEon and
appro�ral of one or both Group 2 tasks:
4. � Securlfy Remedia�ion (Policy Based)
Work on this initiafive will not be included in the scope of this confract.
Work sF�ould be performed fo madify network systems to compfy with the appro�ed
security policy, the security arch�tecture pian, and the securi�y standards and guidelines
documents. These documents may require that systems be modified to account for new
requirements on password lengths, system naming con�en�ions, firewall access rules,
and so forth.
4.2 Securify Awareness
Work on this inifiative will nat be included in the scope of this contrac�,
A security awareness program should be implemented to assist Cify employees in
understanding the new security pro�ram and their responsibilities under t�e new
program. The purpose and content Qf the appro�ed secu�ity policy should be discvssed,
and new security requirements mandated by ihe security policy should be described.
The content of the security awareness program should be tailored for t�e various City
employees who will recei�e the information.
4.3 Securrty �pera#ions
Work on this initiative will not be included in the scope of this contract.
Work should b� done to document the Ci#y security operations processes and
procedures. Any processes and procedures that are required by fhe City's appro�ed
security policy bufi that are found to not exist should be identified, and work should be
initia�ed to de�elop and document those processes and procedures.
4
�. Delieerables
Secure Commerce 5ystems will provide a senior security consulfiant who wil[ be ort-sit�
at the City of Fort Worth from Monday fhrough Wednesday, or as required, for the
duration ofi the confra�t. The consultant will a�sa be available remotely via e-mail and
telephane, as needed.
The Secure Commerce Systems security consultanf will serve as �he praject manager
for �he proposed work. The projeci mar�ager wiil be a credentialed security professional,
a Certifi�d Informat�on Systems Security Professional (CISSP), experienced in the 10
security domains and ba�nd by a professional code of ethics. More infarmation on the
C1SSP credential is presented in Appendix B.
Secure Commerce Systems will pro�ide a team of senior technical and management
security consultants to pro�ide additional su�port as required and with t�e appro�al of
City ofi Fort Warth management.
Under the scope of t�is agreement, Secure Commerce Systems wi11 d�liver to the Cify
of Fort Worth a number of work products, including the Security fnitiati�e Groups 1 and
2 deliverab�es as specified in the preceding descriptions.
fi. Cr"fy of Fort �/orth �esponsibili�ies
The City of Fort Worth will identify and make a�ailable the necessary personnel and
documen�ation to provide the relevant information necessary to perform the specified
consulting services work.
The City of Fort Worth will provide affice space, supplies, and telecommunications
faciliti�s as required during on-site work.
�.
7.'i
�ssessmen�
�roc�ss IV�anagemen�
Level 3"Formal security eonfiguration control processes" will be achieved via the
proposed 5ecurity Operations task ta document security operaiions procedures.
Le�el 4 requires "Adapti�e Security Management", a dacumen�ed process for
responding to day-to-day changes to the City vf Fork Wor�h's security environmen#. The
proposed policy, architecture, and remediation tasks will pro�ide a platform for adapti�e
security management, bufi implementation will require the implementaiion of additior�al
tools, p�ocesses, and procedures thaf are not within the scope of the work fhat is
proposed.
�.� Poli�ies
Le�ef 3"Some policies are documented at corporate fe�el" will be achieved by the
proposed Security Policy Development and Security Standards & Guidelines
De�elopment tasks.
The City of Fort Wor�h should be compliant with the Le�el 4 requiremer�t "Corpora#e
po{icy is fully documented, supported by management" within the scope of the wor� thai
is proposed.
7.3 ��chnology
Leve! 3"Use of threat & �ulnerability monitoring technology" is in fhe process of being
implemented (e.g. RealSecure IDS and Retina scanner) and will be formalized through
the Network Security Architecture Re�iew tas�.
Technical requireme�ts for the Level 4"Integrated Adapfive 5ecurity Environment" wil{
be addressed in the Network Security Architecture plan, but implementation of a
technical solution is outside the scope of the work that is proposed.
�.4 NYe�rics
Level 3"Security baseline estabf ished" wi11 be achieve� through the proposed policy,
architecture, and remediafion tasks.
Le�el 4"Full security posture, response, and awareness me#rics" is outside tF�e scope
of the work that is proposed. Technic�l requirements for the collection of these metrics
will be addressed in the Network Security Architecture plan, but implementation of a
technical solution will require additional vvork.
�xbi��� �
�����i�� �n�� ���s
Mr. Barry Diller will be the lead security cons�l#ant ar�d project manager for the team,
providing securi#y consulting services afi a fee rate per hour of $1 a0.
Other Secure Commerce Systems senior iechnical personnel will �e ufilized as needed,
at iheir fee rate, and their biographies are presented in Appendix A. The fee rate per
hour for Dr. Steve Cummings and oth�er subject matfer experts will be $�80 per hour.
RACF technical consulting services will ha�e a f�� rate per hour af $150.
�
�J
�e��ri�y �on�ui�ing ��rvic�s
I�A�� 7e�hntc�C �or1�u[ti�g
��fVlG�S
��8 �73,��(�
� 6 �2,���
Tota�t nvt i��l�ding exp��ses
�`r"T5,600 �
Secure Commerce Systems is a State of Texas Qualified Information Systems Vendor
(QISV), r�umber 1760694594100.
�xpenses
Professional fiees do not include travel and fiving costs. Actual #ra�el and li�ing
expenses incurred by Secure Commerce Systems consultants will be passed on ta the
City of Fort Worth fo� reimbursement under the terms of this ag�eement. Secure
Commerce Systems strives to reduce tra�el expenses vn behalf of its clients.
City of �o�t T�T�ort�i, T'exas
���r� ��� ���r�c;l �.��r�u��c�����
�ATE REFERENCE NUMB�R LOG NAME PAG�
�418103 p�9��� �003-0097 1 of 2
sus��cT C�NFIRM THE PURCHASE OF PROF'ESSI�NAL COMPUTER SECURITY SERVICES
AND AUTHORIZE A CONTRACT FOR PROFES514NAL SERVICES WITH SECURE
GOMMERC� SYSTEMS, ING. FOR THE INFORMATION TECHNOL4GY SOLUTI4NS
DEPARTMENT
RECOMMENDATfON:
It is recommended that the City Council:
1. Confirm th� purchase of professional computer security services from 5ecure Commerc� Systems,
Inc. {Secure Cnmmerce) for the period F�br�ary 23, 2003, to February 28, 2003, in fhe amount of
$10,650; and
2. Authorize the City Manager ta en#er into a contract with Secure Cammerce #or the period April 8,
20Q3, to �ctober 31, 20D3, for an amount not to exceed $152,400.
DISCUSSlQN:
The City's Internal Audit Department engaged Secure Commerce ta evaluate the City's comput�r
s�curity pursuant to a comp�etitive selection proc�ss (Request for Proposal) and awarded a contract for
this assessment (M&C P-9691, Dctober S, 2002). In December 2002, 5ecure Commerce provided a
report to the Go�ernment an� Neighborhood Relatians Committee regarding the sta�us of compufier
seeurity and made certain recommendations far remediation o# idenfified deficiencies.
Ai the fime of the management transitian in the Information Technology Sa[utiar�s Department (IT
Solutions), at t�e end of February 2D03, Secure Commerce was engaged to assure the continued
security af the City's camputer network dur�ng �he transition. This firm had recently campleted a
s�curity audit and was deemed uniquely qualified to assist in assuring on-going integrity and stability.
Now it is r�cammended tha� Secure Commerce be engaged fa provide additionaf assistance to
implement certain remediation actions to address high and medium risk s�curity deficiencies as
identified in their original assessment. The a�reed scope of work will be completed in six months at a
cast not io exceed $152,400.
Secur� Commerce is designated as a Qua�ified Information Systems Vendor by the S#ate of Texas.
Under Secfiion 271.083 af the Texas Local Go�ernment Code, a local go�ernmenf sa#isfies competiti�e
requirements when [t makes a purchas� thraugh the State of Texas General Service Commission
catalogue purchasing procedure established by Section 2157.061 of the Texas Go�ernment Code, The
City will comply with the procedure of the purchase agreement authorized under this Mayor and Counci�
Gommunication.
C`ity of'1�'o�t Wo�th9 �'e.xas
���� �r�� ���nc�r �.���r�r��c�r���rn
DAT� REFERENCE NUMBER LOG NAME PAGE
4�a�a3 ��9��1 0003-0097 2 0� 2
s�B.��cT C4NFIRM THE PIJRCHASE OF PROFE5510NAL COMPUTER SECLfRITY SER1fICES
AND AUTHORIZE A CONTRACT FOR PROFESSIONAL SERVICES WITH SECURE
COMMERCE SYSTEMS, INC. F'QR THE INF4RMAT[ON TECHNOLOGY SOLUTIONS
DEPARTMENT
F[SCAL 1NFORMATIONICERTIFICATIONe
The Finance Director certifies that funds are available in the cUrrent operating budget, as appropriated,
of the Ir�formation Systems Fund.
LVII. r
BQN103-0097NVW
5ubmitted for City Manager's
o��� by:
L,iUby Watson
Originafing Department Head:
.Tim Keyes
Dale Fisselar
Additionai Tniormatian Contact:
Robert Combs
Randy Rinon
I FUND I ACCOUNT I CENTEIt I �#MOUNT
� (to}
I
b183
�
$517 I (fi�om)
5252 Pf68 5312D0 0041100
$357 I
8252 I
$163,05D.00
CITY SECR�TARY
APPROVED 04/�8/03