Agenda

Return

C. 64

To:	Board of Supervisors
From:	William Walker, M.D., Health Services Director
Date:	April 18, 2017

Contra

Costa

County

Subject:

Approve Amendment/Extension #23-570-2 with WhiteHat Security, Inc.

APPROVE	OTHER
RECOMMENDATION OF CNTY ADMINISTRATOR	RECOMMENDATION OF BOARD COMMITTEE

Action of Board On: 04/18/2017

APPROVED AS RECOMMENDED

OTHER

Clerks Notes:

VOTE OF SUPERVISORS

AYE:

John Gioia, District I Supervisor
Candace Andersen, District II Supervisor
Diane Burgis, District III Supervisor
Karen Mitchoff, District IV Supervisor
Federal D. Glover, District V Supervisor

Contact:	David Runt, 925-335-8700
cc:	Tasha Scott Marcy Wilhelm Allyson Eggert

I hereby certify that this is a true and correct copy of an action taken and entered on the minutes of the Board of Supervisors on the date shown.
ATTESTED: April 18, 2017
David Twa,

BY:	, Deputy

RECOMMENDATION(S):

APPROVE and AUTHORIZE the Health Services Director, or his designee, to execute, on behalf of the County, Contract Amendment #23-570-2 with WhiteHat Security, Inc., effective April 1, 2017, to amend Contract #23-570 (as amended by #23-570-1), to increase the payment limit by $85,000, from $150,000 to a new payment limit of $235,000, for additional software licenses for security and vulnerability scanning for the Health Services Information Systems Unit, and to extend the termination date from August 3, 2017 to August 3, 2018.

FISCAL IMPACT:

Upon approval, the Department may incur additional contractual expenses of up to $85,000 during the proposed agreement period, which would be funded 100% by the Whole Person Care grant allocation.

BACKGROUND:

In November 2015, the County Administrator approved and the Purchasing Services Manager executed Contract #23-570 (as amended by Amendment Agreement #23-570-1) with WhiteHat Security, Inc., to provide software security and vulnerability scanning and support services including, consulting and technical support to the Health Services Department’s Information Systems Unit, for the period from August 3, 2015 through August 3, 2016.

Approval of Contract Amendment #23-570-2 will allow WhiteHat Security, Inc. to continue to provide software and vulnerability scanning, consulting, technical support, and training to the Department’s Information Systems Unit, through August 3, 2018. The Master Software as a Service Agreement includes intellectual property indemnification language.

The Department uses WhiteHat Security software to scan third party sites for application vulnerabilities and to minimize risk prior to using these systems and during their ongoing use. Due to this increase in externally-hosted applications, the Department also needs to purchase additional software licenses as it has exceeded its existing number of licenses.

CONSEQUENCE OF NEGATIVE ACTION:

If this amendment is not approved, the Health Services Department’s Information Systems Unit will not receive additional licenses and consulting, technical support, and training from this contractor to mitigate risks associated with externally-hosted applications. Projects for the Community Connect cannot be deployed and the objectives and funding for the Community Connect will not be received.