Agenda

Return

C. 78

To:	Board of Supervisors
From:	Anna Roth, Health Services Director
Date:	August 7, 2018

Contra

Costa

County

Subject:

Service Order for Renewal of Agreement #23-570 with WhiteHat Security, Inc.

APPROVE	OTHER
RECOMMENDATION OF CNTY ADMINISTRATOR	RECOMMENDATION OF BOARD COMMITTEE

Action of Board On: 08/07/2018

APPROVED AS RECOMMENDED

OTHER

Clerks Notes:

VOTE OF SUPERVISORS

AYE:

John Gioia, District I Supervisor
Diane Burgis, District III Supervisor
Karen Mitchoff, District IV Supervisor
Federal D. Glover, District V Supervisor

ABSENT:

Candace Andersen, District II Supervisor

Contact:	Patrick Wilson, 925-335-8700
cc:	Tasha Scott Marcy Wilhelm

I hereby certify that this is a true and correct copy of an action taken and entered on the minutes of the Board of Supervisors on the date shown.
ATTESTED: August 7, 2018
David Twa,

BY:	, Deputy

RECOMMENDATION(S):

APPROVE and AUTHORIZE the Health Services Director, or designee, to execute on behalf of the County, a contract with WhiteHat Security, Inc., for the renewal of software licenses and support services for the Health Services Department's Information Systems Unit in an amount not to exceed $120,000 for the period August 3, 2018 to August 2, 2019.

FISCAL IMPACT:

100% funding is included in the Hospital Enterprise Fund I budget.

BACKGROUND:

In November 2015, the County Administrator approved and the Purchasing Services Manager executed Contract #23-570 with WhiteHat Security, Inc., to provide software security and vulnerability scanning and support services including, consulting and technical support to the Health Services Department’s (HSD) Information Systems Unit, for the period from August 3, 2015 through August 3, 2016. On August 16, 2016, the Board approved Contract Amendment #23-570-1, for the renewal of services, to increase the payment limit from $50,000 to a new payment limit of $150,000, and to extend the termination date from August 3, 2016 to August 3, 2017. On April 18, 2017, the Board approved Contract Amendment #23-570-2 to extend the term to August 3, 2018. On August 15, 2017, the Board approved Contract Amendment #23-570-3 to purchase additional licenses and increase the payment limit to $274,000.

Approval of the renewal service order will allow WhiteHat Security, Inc. to continue to provide software and vulnerability scanning, consulting, technical support, and training to the Department’s Information Systems Unit, through August 2, 2019.

HSD is using more applications that are hosted by third parties. HSD uses WhiteHat Security software to scan the third-party sites for application vulnerabilities and to minimize risk prior to using these systems and during their ongoing use.

CONSEQUENCE OF NEGATIVE ACTION:

If this renewal is not approved, the Health Services Department’s Information Systems Unit will not be able to maintain licenses and receive consulting, technical support, and training from this contractor to mitigate risks associated with externally-hosted applications. Projects for Community Connect cannot be deployed and the objectives and funding for the Community Connect will not be received.