Agenda

Return

C. 40

To:	Board of Supervisors
From:	Anna Roth, Health Services Director
Date:	August 2, 2022

Contra

Costa

County

Subject:

Amendment/Extension #23-719-1 with Microsoft Corporation

APPROVE	OTHER
RECOMMENDATION OF CNTY ADMINISTRATOR	RECOMMENDATION OF BOARD COMMITTEE

Action of Board On: 08/02/2022

APPROVED AS RECOMMENDED

OTHER

Clerks Notes:

VOTE OF SUPERVISORS

AYE:

John Gioia, District I Supervisor
Candace Andersen, District II Supervisor
Diane Burgis, District III Supervisor
Karen Mitchoff, District IV Supervisor
Federal D. Glover, District V Supervisor

Contact:	Patrick Wilson, 925-335-8777
cc:	F Carroll M Wilhelm

I hereby certify that this is a true and correct copy of an action taken and entered on the minutes of the Board of Supervisors on the date shown.
ATTESTED: August 2, 2022
Monica Nino, County Administrator

BY:	, Deputy

RECOMMENDATION(S):

APPROVE and AUTHORIZE the Health Services Director, or designee, to execute on behalf of the County, Contract Amendment/Extension Agreement #23-719-1 with Microsoft Corporation, a corporation, effective August 2, 2022, to amend Contract #23-719, to increase the payment limit by $1,277,657, from $1,140,911 to a new payment limit of $2,418,568, and to extend the term end date from December 31, 2022, to June 30, 2023, for professional services for network security projects, for the Health Services Information Technology Unit.

FISCAL IMPACT:

Approval of this amendment will result in additional expenditures of up to $1,277,657 for the extended 6-month period and will be fully funded as budgeted by the department in FY 2022-23, by Hospital Enterprise Fund I revenues. (No rate increase)

BACKGROUND:

In 2004, The Contra Costa County Health Services Department (HSD) started using the Active Directory to manage their network. However, during the building phase, a design/decision flaw occurred; the design team selected to use the domain ccchsd.gov. Unfortunately, this domain is not owned or controlled by HSD. That was acceptable when the HSD's systems did not connect to other health systems and the state. Not owning this domain means HSD cannot buy security certificates externally to authenticate users and businesses; identifying whether the connection is secure is not within HSD's capability. To rectify this, HSD repeatedly inquired with the Federal department responsible for .gov to no avail.

In 2017, the Contra Costa County Purchasing Department signed the Microsoft Master Services Agreement #U8794987 on behalf of Contra Costa County for its Health Services Department, effective December 12, 2017. This agreement will remain in effect until terminated.

On June 22, 2021, the Board of Supervisors approved Contract #23-719 with Microsoft for professional services (Active Directory Migration Service) regarding HSD’s migration from ccchsd.gov to a new domain it controls and owns to modernize HSD’s security infrastructure to increase its network resilience to cyber intrusion. Microsoft is the software developer; uniquely qualified to support the lengthy and complex process and was (therefore) granted a sole-source status for the contract.

Approval of Contract Amendment/Extension Agreement #23-719-1 will allow the contractor to continue providing services through June 30, 2023, modifying Microsoft Consulting Services Work Order T002203-286226-342067 to incorporate the Statements of Work, Privileged Access Workstation, and AD Migration Assistance.

CONSEQUENCE OF NEGATIVE ACTION:

If this contract is not approved, HSD’s infrastructure project cannot be completed, and the network will remain at risk of serious security vulnerabilities.