Agenda

Return

C. 79

To:	Board of Supervisors
From:	Anna Roth, Health Services Director
Date:	June 22, 2021

Contra

Costa

County

Subject:

Contract# 23-719 with Microsoft Corporation

APPROVE	OTHER
RECOMMENDATION OF CNTY ADMINISTRATOR	RECOMMENDATION OF BOARD COMMITTEE

Action of Board On: 06/22/2021

APPROVED AS RECOMMENDED

OTHER

Clerks Notes:

VOTE OF SUPERVISORS

AYE:

John Gioia, District I Supervisor
Candace Andersen, District II Supervisor
Diane Burgis, District III Supervisor
Karen Mitchoff, District IV Supervisor
Federal D. Glover, District V Supervisor

Contact:	Patrick Wilson, 925-335-8777
cc:	Marcy Wilhelm

I hereby certify that this is a true and correct copy of an action taken and entered on the minutes of the Board of Supervisors on the date shown.
ATTESTED: June 22, 2021
Monica Nino, County Administrator

BY:	, Deputy

RECOMMENDATION(S):

APPROVE and AUTHORIZE the Health Services Director, or designee, to execute on behalf of the County, Microsoft Consulting Services Work Orders, with Microsoft Corporation, a corporation, in an amount not to exceed $1,140,911, to provide professional services for network directory reconfiguration and migration for the period from June 1, 2021 through December 31, 2022.

FISCAL IMPACT:

This contract will result in contractual service expenditures of up to $1,140,911 over an 18-month period and will be funded 100% by Hospital Enterprise Fund I. (No rate increase)

BACKGROUND:

In 2004, The Contra Costa County Health Services Department (HSD) started using the Active Directory to manage their network. However, during the building phase, a design/decision flaw occurred; the design team selected to use the domain ccchsd.gov. Unfortunately, this domain is not owned nor controlled by the County. That was acceptable when the County’s systems didn’t connect to other health systems and the State. Unfortunately, not owning this domain means the County cannot buy security certificates externally to authenticate users and businesses. Identifying whether the connection is secure is not within our capability. To rectify this, HSD has repeatedly inquired with the Federal department responsible for .gov to no avail. HSD must now start the tedious process of moving from ccchsd.gov to a new domain that we control and own.

Microsoft is the developer of Active Directory and is uniquely qualified to support this lengthy and complex process and therefore granted a sole-source status for this contract. The objective of this project is to modernize HSD’s security infrastructure to increase its network’s resilience to cyber intrusion and to change source of authority while preserving Office 365/Azure resources attached to the same person. This project must start in June of 2021 to ensure its completion before other critical projects ending in 2023, and includes: Microsoft Consulting Services Work Order T002203-286226-342067 covering Statement of Work - Active Directory Security Modernization (ADM), and Statement of Work – Source of Authority during Forest Restructuring (SOAT), and Microsoft Consulting Services Work Order T002213-336587-410781 covering Statement of Work – Public Key Infrastructure Implementation Services (PKI).

In 2017, the Contra Costa County Purchasing Division signed the Microsoft Master Services Agreement #U8794987 on behalf of Contra Costa County for its Health Services Department, effective December 12, 2017. This agreement will remain in effect until terminated. The work orders are being entered into pursuant to the terms of the Master Services Agreement.

Approval of Contract #23-719 will allow this contractor to provide professional services through December 31, 2022.

CONSEQUENCE OF NEGATIVE ACTION:

If this contract is not approved, the Health Services Department infrastructure will remain at risk to serious security vulnerabilities.