HomeMy WebLinkAboutContract 32066 CITY SECRETAR n ,�
^ONTRACT NO.
,'
LIMITED ACCESS AGREEMENT
This LIMITED ACCESS AGREEMENT ("Agreement") is made and entered into by and
between the CITY OF FORT WORTH ("City"), a home rule municipal corporation organized
under the laws of the State of Texas and situated in portions of Tarrant, Denton and Wise
Counties. Texas, and Vivare Inc. Services, hereinafter ("Contractor"), a Texas corporation.
The following statements are true and correct and form the basis of this Agreement.-
WHEREAS:
greement:WHEREAS:
A. The City owns and operates a file server computer system and network (collectively the
"Network"). Contractor wishes to have access to the City's network.
B. Contractor wishes to perform activities as defined in the Professional Services
Agreement for Technical Staff Augmentation Services and as provided for in City
Secretary Contract "Professional Services Agreement between the City of Fort Worth
and Vivare, Inc. No. , together with any amendments, appendixes or
f t re statement(s) of work, hereafter referred to as "City Secretary Contract No.
C. In order to perform the necessary duties, Contractor needs access to the City's MAXIMO
and PeopleSoft applications and all applications and databases to which MAXIMO and
PeopleSoft interfaced with as well as any other applications and databases for which the
City may request troubleshooting or other technical staff augmentation services.
Contractor also requires access to City email and calendars, Internet and intranet.
D. The City is willing to grant Contractor access to the Network, subject to the terms and
conditions set forth in this Agreement and in the City's standard outside connections
policy, ("Extranet Standard") attached as Exhibit "A" and hereby incorporated by
reference and made a part of this Agreement for all purposes herein.
NOW, THEREFORE, the City and Contractor hereby agree as follows:
1. GRANT OF LIMITED ACCESS.
Contractor is hereby granted a limited right of access to the City's Network for the sole
purpose of providing technical staff augmentation services. Contractor can only enter the
Network via the City's computer system; therefore, the City will provide Contractor with a
password and access number or numbers as necessary to perform Contractor's duties.
2. NETWORK RESTRICTIONS.
2.1. Contractor may not share any passwords or access number or numbers provided
by the City except with Contractor's officers, agents, servants or employees who work
directly with this project.
2.2. Contractor may not access the Network for any purpose other than those set
forth in Section B of this Agreement.
2.3. Contractor acknowledges, agrees and hereby gives its authorization to the City to
monitor Contractor's use of the City's Network in order to ensure Contractor's
compliance with this Agreement.
2.4. A breach by Contractor, its officers, agents, servants or employees, of this
Agreement and any other written instructions or guidelines that the City provides to
Contractor pursuant to this Agreement shall be grounds for the City immediately to deny
Contractor access to the Network and Contractor's Data in addition to any other
remedies that the City may have under this Agreement or at law or in equity.
2.5. The City may terminate this Agreement at any time and for any reason,
3. LIABILITY AND INDEMNIFICATION.
SUBJECT TO THE LIMITATION OF LIABILITY SET FORT BELOW, CONTRACTOR
SHALL BE LIABLE AND RESPONSIBLE FOR ALL DAMAGES THAT THE CITY MAY INCUR
DIRECTLY ON ACCOUNT OF ANY BREACH OF THIS AGREEMENT BY CONTRACTOR,
ITS OFFICERS, AGENTS, SERVANTS OR EMPLOYEES. THE CITY, ITS OFFICERS,
AGENTS, SERVANTS AND EMPLOYEES, SHALL NOT BE LIABLE FOR ANY DAMAGES
THAT CONTRACTOR MAY INCUR AS A RESULT OF THE CITY'S RESTRICTIONS TO OR
DENIAL OF ACCESS TO CONTRACTOR'S DATA ON ACCOUNT OF ANY BREACH OF
THIS AGREEMENT BY CONTRACTOR, ITS OFFICERS, AGENTS, SERVANTS OR
EMPLOYEES, OR FOR ANY REASONABLE SECURITY MEASURES TAKEN BY THE CITY.
IN ADDITION, CONTRACTOR SHALL BE LIABLE AND RESPONSIBLE FOR ANY
AND ALL PROPERTY LOSS, PROPERTY DAMAGE AND/OR PERSONAL INJURY,
INCLUDING DEATH, AND ALL CLAIMS, DEMANDS AND JUDGMENTS THEREFORE, TO
THE EXTENT CAUSED BY THE NEGLIGENT ACT(S) OR OMISSION(S) OR INTENTIONAL
MISCONDUCT OF CONTRACTOR, ITS OFFICERS, AGENTS, SERVANTS AND/OR
EMPLOYEES. CONTRACTOR, AT CONTRACTOR'S OWN COST OR EXPENSE, HEREBY
AGREES TO INDEMNIFY, DEFEND AND HOLD HARMLESS THE CITY, ITS OFFICERS,
AGENTS, SERVANTS AND/OR EMPLOYEES FROM AND AGAINST ANY CLAIM,
LAWSUIT, DEMAND OR OTHER ACTION TO THE EXTENT THAT THE SAME ARISES
FROM THE NEGLIGENT ACT(S) OR OMISSION(S) OR INTENTIONAL MISCONDUCT OF
CONTRACTOR, ITS OFFICERS, AGENTS, SERVANTS OR EMPLOYEES.
4. AGREEMENT CUMULATIVE.
This Agreement is cumulative of and in addition to any written contracts, agreements,
understandings or acknowledgments with the City signed by Contractor. To the extent that any
term or condition of this Agreement conflicts with any term or condition of City Secretary
Contract No. , City Secretary Contract No. shall control.
5. ENTIRE AGREEMENT.
The terms of this Agreement shall not be waived, altered, modified, supplemented, or
amended in any manner except by written instrument signed by an authorized representative of
both the City and Contractor. This Agreement and any other documents incorporated herein by
reference constitute the entire understanding and Agreement between the City and Contractor
as to the matters contained herein regarding Contractor's access to and use of the City's
1
Network. The signature below of an authorized representative acknowledges that the Contractor
has read this Agreement and agrees to be bound by terms and conditions set forth herein.
INYVWESS WHEREOF, the parties hereto have executed this Agreement on this
1b.
day of _ , 2005.
ClT F F RT ORTH• CON"fR TOR:
By: -- By: —
Marc Ott Rajesh Sh
Assistant City Manager Vice Presid
/ 1M...
Date: Date:__.._6 Z3
=MaCUIRED
M & C:
APPROVED AS TO FORM AND LEGALITY:
By:
Assistant Cit Attorney
Date: q___5 _
Attested By:
tcl'i
tyHendrLK
ty Sccretary
3
I
EXHIBIT "A"
EXTRANET STANDARD
Overview
The purpose of this standard is to establish the requirements under which third party
organizations may connect to the City of Fort Worth networks for the purpose of transacting City
business. The standards listed are specific activities required by Section 2.2 of the City of Fort
Worth Information Security Policy.
Scope
Connections between third parties that require access to non-public City of Fort Worth
resources fall under this standard, regardless of whether a telecommunications circuit (such as
frame relay or ISDN) or Virtual Privacy Network (VPN) technology is used for the connection.
Connectivity to third parties such as the Internet Service Providers (ISPs) that provide Internet
access for the City of Fort Worth or to the Public Switched Telephone Network do not fall under
this standard.
Standard
Security Review
All new extranet connectivity will go through a security review with the Information Security
department (IT Solutions). The reviews are to ensure that all access matches the business
requirements in a best possible way, and that the principle of least access is followed.
Third Party Connection Agreement
All new connection requests between third parties and the City of Fort Worth require that the
third party and the City of Fort Worth representatives agree to and sign a third party agreement.
This agreement must be signed by the Director of the sponsoring organization as well as a
representative from the third party who is legally empowered to sign on behalf of the third party.
The signed document is to be kept on file with IT Solutions. All documents pertaining to
connections into the City of Fort Worth labs are to be kept on file with IT Solutions.
Business Case
All production extranet connections must be accompanied by a valid business justification, in
writing, that is approved by a project manager in IT Solutions. Lab connections must be
approved by IT Solutions. Typically this function is handled as part of a third party agreement.
The sponsoring organization must designate a person to be the Point of Contact (POC) for the
Extranet connection. The POC acts on behalf of the sponsoring organization, and is responsible
for those portions of this policy and the third party agreement that pertain to it. In the event that
the POC changes, IT Solutions must be informed promptly.
Establishing Connectivity
Sponsoring organizations within the City of Fort Worth that wish to establish connectivity to a
third party are to file a new site request with IT Solutions to address security issues inherent in
the project. If the proposed connection is to terminate within a lab at the City of Fort Worth, the
sponsoring organization must engage IT Solutions. The sponsoring organization must provide
4
full and complete information as to the nature of the proposed access to the extranet group and
IT Solutions, as requested.
All connectivity established must be based on the least-access principle, in accordance with the
approved business requirements and the security review. In no case will the City of Fort Worth
rely upon the third party to protect the City of Fort Worth's network or resources.
Modifying or Changing Connectivity and Access
All changes in access must be accompanied by a valid business justification, and are subject to
security review. Changes are to be implemented via corporate change management process.
The sponsoring organization is responsible for notifying IT Solutions when there is a material
change in their originally provided information so that security and connectivity evolve
accordingly.
Terminating Access
When access is no longer required, the sponsoring organization within the City of Fort Worth
must notify IT Solutions, which will then terminate the access. This may mean a modification of
existing permissions up to terminating the circuit, as appropriate. IT Solutions must conduct an
audit of their respective connections on an annual basis to ensure that all existing connections
are still needed, and that the access provided meets the needs of the connection. Connections
that are found to be deprecated, and/or are no longer being used to conduct the City of Fort
Worth business, will be terminated immediately. Should a security incident or a finding that a
circuit has been deprecated and is no longer being used to conduct the City of Fort Worth
business necessitate a modification of existing permissions, or termination of connectivity, IT
Solutions will notify the POC or the sponsoring organization of the change prior to taking any
action.
Definitions
Circuit For the purposes of this policy, circuit refers to the method of
network access, whether it's through traditional ISDN, Frame Relay
etc. or via VPN encryption technologies.
Sponsoring Organization The City of Fort Worth organization that requested that the third
party have access to the City of Fort Worth network.
Third Party A business that is not a formal or subsidiary part of the City of Fort
Worth.
5
AC RD CERTIFICATE OF LIABILITY INSURANCEDATE(MM+DWYYYYI
06/t2/2005
PRODUCER (972)267-8000 FAX (972)3$0-2001 THIS CER 1TROATIRE IS ISSU A MA7TER OF IN FOFMATIOU—
Insurance One Agency, L.C. ONLYAN13 CONFERS NO RIGHTS UPON THE CERTIFICATE
HOLDER.THIS CERTIFICATE DOES NOT AMEND,EXTEND OR
16300 Addison Road, Suite 100 ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW.
P.O. Box 796428
Dallas, TX 753796428 INSURERS AFFORDING COVERAGE NA.IC 4
IN-SURED Vivare, Inc. INSURFRA_ Federal Insurance Company
One Associates, Inc. INSURER 8' Pacific Indemnity
Paranet Solutions, LLC MSURERC:
5148 Village Creek Drive INSURERD_
Plano, TX 75093 INSURER E' f
COVERAGES
THE POLICIES OF INSURANCE LISTED BELOW HAVE'BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD I NO(CATEU.NOTWITHSTANDING
ANY REQUIREMENT,TEAM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS CERTIFICATE MAY 6E ISSUED OR
MAY PERTAIN,THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS,EXCLUSIONS AND CONDITIONS OF SUCH
POLICIES.AGGREGATE LIMITS SHOWN WAY HAVE BEEN REDUCED BY PAID CLAIMS.
Iry WR TYPE OF INSURANCE POLICY NUMBER DAT (MMfD4 DA E ' LI61RS
ORNERALLIABILITY 35791433 01/28/2005 01/29/2006 EACHCCCURRENCE $ 1,000,000
)( OOWAENC3ALGENERALLIAMLITY DAMAGE
r17 S MCL
FREMISCLAIMS MADE �OCCUR MED E%P C"one persorJ 3 10,000
A PEASONAL P,ADV IWURY S I OOO,000
GENERALAGGREGATE $ 21000,000
GEN%AGGROSATELIMIT APPLIES PFR- PYRODUCT8-ODMP.'OPAGG $ 1,000,000
X POLICY SEP9 17 LOC
AUTOMOBILE LIABILITY HAP0474992914 01/28/2005 01/2$/2006
COMBINED 81N6LELIMIT S
ANY AUTO g0'��U 11000,000
ALL OWNED AUTOS BODILY INJURY
SCHEDULED AUTOS ;Pyr pg Sprt} S
B )( HIRED AUTOS DOOILY INJURY
X NOlkAgNED AUTOS (Por gCCA1af11?
PROPERTYCWMAGE
(Per 2COHenB
0ARAOEUABILITY AUTO C?NLY-EA ACCIDENT $
ANY AUTO OTHER THAN EA AGC $
- AUTDONLY; AGO S
9=6SUMBRELIALIAISILIITY 93631945 01/28/2005 01/28/2006 EACH OCCURRENCE S 4,000,000
X ODCWA CLAIMS MADE AGGREGATE 6 4 OGD 000
A $
DEDUCTIBLE
RETENTION $ S
WORKERS COMPENSATION AND 71702914 01/28/200S 01/2$/2006 X roRY uMITs ER
MPLOYEIRT LIABILITY
E.L.EACH ACCIDENT S 11000,000
A ANY W10EIR MEMBER+EXCLUDED?EC�I� E.L.OrsEASE•EA EMPLOYE $ ] 000,000
Irm,diwibe unftr
SPECIAL PROVISIONS bOUN EL DISEASE-POLICY LIMIT $ 11000,000
OTHER
DESCH P7ION OF OPERATIONS I LOCATIONS JVEHICLF.61 q(CLUSIONS ADDED 6Y ENDORSEMENT f SPECIAL PROVISIONS
ertificate Holder is Additionally Insured, only as required by written contract, with respect to the
eneral Liability policy and shall include its employees, officers, officials, agents, and volunteers
in respect to the contracted services.
CERTIFICATE HOLDER CANCELLATION
SHOULD ANY OF THE AeOVE DESCRIBED POLICIES BE CANCELLED BEFORE THE
EXPIRATION DATE 7HE11E0F,THE 166UINCI INSURER WILL ENDEAVOR TO MAIL
31) DAYS WRITTEN NOTICE To THE CERTIFICATE HOLDER NAMED TO THE LEFT.
Risk Manager, City of Fort Worth BUT FAILURE TO MAILSUCH NOTICE SHALL IMPOSE NO OSLIQATION OR LIABILITY
1000 ThrockmDrton OF Af jY KIND UPON THE INSURER,ITS AOENTS OR REPRESENTATIVES.
Fort Worth, TX 76102 AUTvORI2ED R E A71VE
Charles a
ACORD 25(2001/08) QA#bRD CORPORATION 1988
l 1�1
IMPORTANT
If the certificate holder is an ADDITIONAL.INSURED,the policy(les)must be endorsed. A statement
on this certificate does not confer rights to the certificate holder in tieu of such endarsement(s).
If SUBROGATION IS WAIVED,subject to the terms and conditions of the policy,certain policies may
require an endorsement.A statement on this certificate does not confer rights to the certificate
holder in lieu of such endorsament(s),
DISCLAIMER
The Certificate of Insurance on the reverse side of this form does not constitute a contract between
the issuing insurer(s),authorized representative or producer,and the certificate holder,nor does it
affirmatively or negatively amend,extend or alter the coverage afforded by the policies listed thereon.
ACORD 25(2004108)