Loading...
HomeMy WebLinkAbout053198-R6 - General - Contract - Weaver and Tidwell, LLPCSC No. 53198-R6 CITY OF FORT WORTH CONTRACT RENEWAL NOTICE October 8, 2025 Weaver and Tidwell LLP Attn: Legal Dept 4400 Post Oak Parkway Suite 1100 Houston, TX 77027 Re: Contract Renewal Notice City Secretary Contract No. 53198 (the "Contract") Renewal Term No. 6 of 10, December 10, 2025 to December 9, 2026 The above referenced Contract with the City of Fort Worth expires on December 9, 2025 (the "Expiration Date"). Pursuant to the Contract, contract renewals are at the sole option of the City. This letter is to inform you that the City is exercising its right to renew the Contract for an additional one (1) year period, which will begin immediately after the Expiration Date. All other terms and conditions of the Contract remain unchanged. Please return this signed acknowledgement letter, along with your quote for charges for the new renewal term, and current insurance certificate, to the address set forth below, acknowledging receipt of the Contract Renewal Notice. To ensure that your company information is correct and up-to-date, please log onto PeopleSoft Purchasing at https://www.fortworthtexas.gov/departments/finance/purchasing, If you have any questions concerning this Contract Renewal Notice, please contact us at the email address listed below. Sincerely, City of Fort Worth IT Solutions I Finance I Contracts 100 Fort Worth Trail, Fort Worth, TX 76102 zz IT Finance Contractsgfortworthtexas.gov OFFICIAL RECORD CITY SECRETARY Contract Renewal FT. WORTH, TX Page 1 of 2 [Executed effective as of the date signed by the Assistant City Manager below.] / [ACCEPTED AND AGREED:] City: By: Name: Title: Date: Dianna Giordano (Nov 6, 202513:45:49 CST) Dianna Giordano Assistant City Manager 11/06/2025 Weaver and Tidwell LLP By: Name: rian J. �thom-as Title: Partner Date: 10/15/2025 CITY OF FORT WORTH INTERNAL ROUTING PROCESS: Approval Recommended: By: $.Trotter (for N.Gunnl (Nov 6, 11:03:42 CST) Name: Kevin Gunn Title: Director, IT Solutions Approved as to Form and Legality: cmyace Ta9Giam By: Candace Pagliam(Nw6,3026Y2:23:MM) Name: Candace Pagliara Title: Sr. Assistant City Attorney Contract Authorization: M&C: 25-0831 Approval Date: 9/16/2025 Form 1295: 2025-1350511 Contract Renewal Contract Compliance Manager: By signing I acknowledge that I am the person responsible for the monitoring and administration of this contract, including ensuring all performance and reporting requirements. By: Name: Title: J"'eJ Sudong Lee (Oct 21, 2025 22:01:03 CDT) Sudong Lee Sr. IT Solutions Manager City Secretary: A ��s bp444�nq� �pF F°Rraa 0. By: a°moo 9�d Name: Jannette Goodall 93 o=a° P�d'� Title: City Secretary ° °°°°° aan nBxgSaab OFFICIAL RECORD CITY SECRETARY FT. WORTH, TX Page 2 of 2 City of Fort Worth - PCI SAQ Services City of Fort Worth PCI Services Estimate for PCI SAQ Services Roles Weaver: Perform testing over the applicable requirements and provide two completed SAQ-D's and AOC's for Water and Court payment channels, and one SAQ C-VT and AOC for the Water payment channel. City: Review of the two SAQ-D's, one SAQ C-VT, and three AOC's, provide the requested documentation, and be available for walkthroughs. Requirement Scope City payment channel: Requirements outlined in the SAQ P2PE are in -scope. Court payment channel: Requirements outlined in the SAQ A are in -scope. Water payment channel: Requirements outlined in the SAQ C-VT are in -scope. Activity: Estimate for PCI SAQ Services City Payment Channel Hrs Fee Planning / Proj Mgmt 30 $ 7,350 Fieldwork Execution & SAQ Population 55 $ 13,475 Review / Reporting / Issuance 35 $ 8,575 City Payment Channel Total 120 $ 29,400 Court Payment Channel Hrs Fee Planning / Proj Mgmt 30 $ 7,325 Fieldwork Execution & SAQ Population 60 $ 14,700 Review / Reporting / Issuance 35 $ 8,575 Court Payment Channel Total 125 $ 30,600 Water Payment Channel Hrs Fee Planning / Proj Mgmt 40 $ 9,750 Fieldwork Execution & SAQ Population 100 $ 24,500 Review / Reporting / Issuance 40 $ 9,750 Water Payment Channel Total 180 $ 44,000 104,000 Invoicing: Fees will be invoiced in three (3) installments throughout the engagement. Invoices will be for the following amounts: 1. Installment 1: $34,500 2. Installment 2: $34,500 3. Installment 3: $35,000 SAQ Services Assumptions: 1. City will provide accurate data/network flow diagrams and system and device inventories prior to the issuance of a Document Request List from Weaver. 2. Initial requests for documentation or evidence for testing will be fulfilled within 15 business days (e.g. populations, inventories, policies, etc.). Subsequent requests for information (e.g. samples for testing, clarifications on previous requests) will be responded to within 3 business days. All initial requests are provided prior to the start of fieldwork. 3. For the City payment channel that encrypts cardholder data at the point of interaction and can only be decrypted by the processor, the applicable requirements outlined in the SAQ P2PE will be evaluated and documented with the SAQ D. 4. For the Court payment channel that resides on the OpenCities platform managed by Granicus and where the City only has access to manage the webpage components, the applicable requirements outlined in the SAQ A will be evaluated and documented with the SAQ D. 5. For the Water payment channel that collects payments through a virtual payment terminal solution with no connected hardware devices, the applicable SAQ C-VT requirements will be evaluated and documented with the SAQ C-VT. 6. The City has reviewed all "in -scope" requirements in the table "Requirement Type Summary" and agrees that the applicable requirements are In -Place and documented evidence can be made available to demonstrate it as such. 7. For all payment channels the following assumptions were made to identify the applicable requirements: • No cardholder data is retained or stored. All cardholder data is encrypted at the Point of Interaction (POI) or Point of Sale (POS) and the City only retains tokenized transaction information received from the processor. • All applications are off the shelf and no custom code development is performed for the CDE. • SSL and early TLS are not utilized for encryption. 8. The city has performed scans of their networks and systems for cardholder data and can provide documentation demonstrating no cardholder data exists. 9. The Water and Court cardholder data environment is fully segmented from other networks and systems. 10. Issues identified in prior assessments have been remediated and in place for any required periods of time. 11. All "in -scope" requirements have been implemented, and will not require multiple rounds of follow-up between the City and Weaver. 12. Provided documentation is accurate or fully addresses the request or requirement. This estimate is dated October 15, 2025 and is valid through May 31, 2026. weaver 9/15/25, 11:19 AM M&C Review CITY COUNCIL AGENDA Create New From This M&C Official site of the City of Fort Worth, Texas FoRTIVORT11 REFERENCE **M&C 25- 04WEAVER AND TIDWELL DATE: 9/16/2025 NO.: 0831 LOG NAME: PCI AUDIT -ADD RENEWAL OPTIONS CODE: C TYPE: CONSENT PUBLIC NO HEARING: SUBJECT: (ALL) Authorize an Amendment to a Contract with Weaver and Tidwell, LLP to Add Five Annual Renewal Options at the Current Annual Contract Amount of $250,000.00 for the State of Texas Required Annual Payment Card Industry Audit for the Information Technology Solutions Department RECOMMENDATION: It is recommended that the City Council authorize an amendment to City Secretary Contract No. 53198 with Weaver and Tidwell, LLP to add five (5) annual renewal options at the current annual contract amount of $250,000.00 for the State of Texas required Annual Payment Card Industry Audit for the Information Technology Solutions Department. DISCUSSION: On December 10, 2019, the City of Fort Worth entered into City Secretary Contract, (CSC), No. 53198, a Vendor Services Agreement with Weaver and Tidwell, LLP to provide the City with Payment Card Industry, (PCI), Qualified Security Assessor Services and audit the Information Technology Solutions (ITS) Department and how the City of Fort Worth processes credit card payment made by residents, customers, and clientele throughout several departments, as required each year by the State of Texas, to validate the City of Fort Worth's adherence to the PCI, compliance. On August 27, 2024 Council approved Mayor and Council Communication (M&C), 24-0699 for amendment CSC 53198-A4 to increase the annual contract amount to $150,000.00, for the State of Texas required Annual Payment Card Industry Audit. On July 26, 2025, the City executed amendment CSC 53198-A6 for an administrative increase for an annual contract amount not to exceed $250,000.00, to cover a new PCI 4.0 — 12.3.1 requirement, allowing the City to purchase Risk Analysis Services. This M&C requests authorization to amend CSC 53198 to add five (5) one year renewal options at the current annual contract amount of $250,000.00 for ongoing Annual PCI Audit Requirements. These services assess, validate and document the City's compliance with PCI Data Security Standards (DDS) requirements through annual audits and formal reporting for ITS, Water and Municipal Courts Departments. If PCI audit services are not properly authorized, it could result in non-compliance with DDS leading to failed audits, fines and reputational damage, or the inability to process payment cards and will be required as long as the City handles credit card transactions. A Chapter 252 exemption form, related to these professional services, was approved by the City Attorney's Office. Funding will be budgeted in Other Contractual Services account within the Info Technology Systems Fund and in the Consultant & Other Prof Service account within the Water & Sewer Fund for Fiscal Year 2026. AGREEMENT TERM - Upon City Council's approval, Amendment No. 7 to add renewal options will begin once executed by the Assistant City Manager and end December 9, 2025. RENEWAL OPTIONS - This agreement may be renewed for five (5) successive one-year terms at the City's option. This action does not require specific City Council approval provided that the City Council has appropriated sufficient funds to satisfy the City's obligations during the renewal term. apps.cfwnet.org/council_packet/mc—review.asp?ID=33691 &councildate=9/16/2025 1/2 9/15/25, 11:19 AM M&C Review ADMINISTRATIVE CHANGE ORDER: An administrative change order or increase may be made by the City Manager up to the amount allowed by relevant law and the Fort Worth City Code and does not require specific City Council approval as long as sufficient funds have been appropriated. FISCAL INFORMATION/CERTIFICATION: The Director of Finance certifies that upon approval of the above recommendation and adoption of the Fiscal Year 2026 Budget by the City Council, funds will be available in the Fiscal Year 2026 operating budget, as appropriated, in the Info Technology Systems and Water & Sewer Funds. Prior to an expenditure being incurred, the Information Technology Solutions Department has the responsibility to validate the availability of funds. TO Fund Department Account Project Program Activity Budget Reference # Amount ID I I ID I I I Year I (Chartfield 2) FROM Fund Department Account Project Program Activity Budget Reference # Amount ID I I ID I I I Year I (Chartfield 2) Submitted for City Manager's Office by_ Originating Department Head: Additional Information Contact: Dianna Giordano (7783) Kevin Gunn (2015) Donlen Ruffin (2017) ATTACHMENTS FID Table Weaver Tidwell.xlsx (CFW Internal) Weaver Tidwell Form 1295 Certificate 2025-1350511.pdf (CFW Internal) apps.cfwnet.org/council_packet/mc—review.asp?ID=33691 &councildate=9/16/2025 2/2 FORTWORTH, City Secretary's Office Contract Routing & Transmittal Slip Contractor's Name: Weaver and Tidwell, LLP Subject of the Agreement: Renewal 6 for CSC 53198, a Vendor Services Agreement for Payment Card Industry (PCI) Qualified Security Assessor Services. M&C Approved by the Council? * Yes 9 No ❑ If so, the M&C must be attached to the contract. Is this an Amendment to an Existing contract? Yes ❑ No 0 CSC 53198-R6 If so, provide the original contract number and the amendment number. Is the Contract "Permanent"? *Yes ❑ No 0 If unsure, see back page for permanent contract listing. Is this entire contract Confidential? *Yes ❑ No 9 If only specific information is Confidential, please list what information is Confidential and the page it is located. Effective Date: 12/10/2025 Expiration Date: 12/09/2026 If different from the approval date. If applicable. Is a 1295 Form required? * Yes 9 No ❑ *If so, please ensure it is attached to the approving M&C or attached to the contract. Project Number: Ifapplicable. N/A *Did you include a Text field on the contract to add the City Secretary Contract (CSC) number? Yes 0 No ❑ Contracts need to be routed for CSO processing in the following order: 1. Katherine Cenicola (Approver) 2. Jannette S. Goodall (Signer) 3. Allison Tidwell (Form Filler) *Indicates the information is required and if the information is not provided, the contract will be returned to the department.