Agenda

Return

C. 27

To:	Board of Supervisors
From:	Karen Caoile, Director of Risk Management
Date:	November 16, 2021

Contra

Costa

County

Subject:

Agreement with Coveware

APPROVE	OTHER
RECOMMENDATION OF CNTY ADMINISTRATOR	RECOMMENDATION OF BOARD COMMITTEE

Action of Board On: 11/16/2021

APPROVED AS RECOMMENDED

OTHER

Clerks Notes:

VOTE OF SUPERVISORS

AYE:

John Gioia, District I Supervisor
Candace Andersen, District II Supervisor
Diane Burgis, District III Supervisor
Karen Mitchoff, District IV Supervisor
Federal D. Glover, District V Supervisor

Contact:

Karen Caoile 335-1400

I hereby certify that this is a true and correct copy of an action taken and entered on the minutes of the Board of Supervisors on the date shown.
ATTESTED: November 16, 2021
Monica Nino, County Administrator

BY:	, Deputy

RECOMMENDATION(S):

RATIFY the Director of Risk Management's execution of a contract with Coveware, Inc., for the period October 31, 2021 through November 30, 2021 for cyber-security services in an amount not to exceed $6,700.

FISCAL IMPACT:

Costs are paid through the County's ISF Public Liability Program.

BACKGROUND:

On October 29, 2021 a cyber-security incident was discovered involving an application in the Treasurer/Tax-Collector Office. The application, Electronic Deposit Processing (EDP), is a critical component of the County's finance system. The County's Cyber insurance carrier was contacted and the carrier recommended entering into the agreement with Coveware.

BACKGROUND: (CONT'D)

Under the terms of the agreement, Coveware will assist with security due diligence. The agreement includes mutual indemnification provisions and limits Coveware's liability to the County for damages under the agreement.

CONSEQUENCE OF NEGATIVE ACTION:

Failure to ratify the agreement could slow the expeditious assessment of cyber-security for the EDP system, a critical component of the County's finance system, to safely resume operations.