Agenda

Return

C. 80

To:	Board of Supervisors
From:	Anna Roth, Health Services Director
Date:	August 6, 2019

Contra

Costa

County

Subject:

Contract #23-570-5 with WhiteHat Security, Inc.

APPROVE	OTHER
RECOMMENDATION OF CNTY ADMINISTRATOR	RECOMMENDATION OF BOARD COMMITTEE

Action of Board On: 08/06/2019

APPROVED AS RECOMMENDED

OTHER

Clerks Notes:

VOTE OF SUPERVISORS

AYE:

John Gioia, District I Supervisor
Candace Andersen, District II Supervisor
Diane Burgis, District III Supervisor
Karen Mitchoff, District IV Supervisor
Federal D. Glover, District V Supervisor

Contact:	Patrick Wilson 925-335-8700
cc:	F Carroll M Wilhelm

I hereby certify that this is a true and correct copy of an action taken and entered on the minutes of the Board of Supervisors on the date shown.
ATTESTED: August 6, 2019
David Twa,

BY:	, Deputy

RECOMMENDATION(S):

APPROVE and AUTHORIZE the Purchasing Agent, to execute a purchase order to WhiteHat Security, Inc., in an amount not to exceed $393,976, on behalf of the Health Services Department and a Service Order with WhiteHat Security, Inc. for renewal of software licenses and support services for the Information Systems Unit for the period August 3, 2019 through August 2, 2022.

FISCAL IMPACT:

This Renewal is funded 100% by Hospital Enterprise I Fund.

BACKGROUND:

In November 2015, the County Administrator approved and the Purchasing Services Manager executed Contract #23-570 with WhiteHat Security, Inc., to provide software security and vulnerability scanning and support services including, consulting and technical support to the Health Services Department’s (HSD) Information Systems Unit, for the period from August 3, 2015 through August 3, 2016. On August 16, 2016, the Board approved Contract Amendment #23-570-1, for the renewal of services, to increase the payment limit from $50,000 to a new payment limit of $150,000, and to extend the termination date from August 3, 2016 to August 3, 2017. On April 18, 2017, the Board approved Contract Amendment #23-570-2 to extend the term to August 3, 2018. On August 15, 2017, the Board approved Contract Amendment #23-570-3 to purchase additional licenses and increase the payment limit to $274,000. On August 7, 2018, the Board Approved Contract Amendment #23-570-4 to extend the termination date from August 3, 2018 to August 3, 2019 and increase the payment limit to $150,000.

Approval of the Contract #23-570-5 will allow WhiteHat Security Inc. to continue to provide software and vulnerability scanning, consulting, technical support and training to the Department’s Information Systems Unit, through August 2, 2022.

HSD is using more applications that are hosted by third parties. HSD uses WhiteHat Security software to scan the third-party sites for application vulnerabilities and to minimize risk prior to using these systems and during their ongoing use.

CONSEQUENCE OF NEGATIVE ACTION:

If this renewal is not approved, the Health Services Department’s Information Systems Unit will not be able to maintain licenses and receive consulting, technical support, and training from this contractor to mitigate risks associated with externally hosted applications. Projects for the Community Connect cannot be deployed and the objectives and funding for the Community Connect will not be received.