HomeMy WebLinkAbout _ 4.3(a)--Endpoint Security Replacement � � �' � � �
� � � ' � �' � � ' � ` CITY OF REDDING
REPORT TO THE CITY COUNCIL
MEETING DATE: May 7, 2024 FROM: Tony Van Boekel, Chief
ITElVI NO. 4.3(a) Information Officer/IT
Director
***APPROVED BY***
,ss:Yr�^3tA^:.
�rrs. a��'p
.'cdn x"s+' :'
9�waniu e..v����� � �y"����� ��f�� �� ... ., r.,x x n .x rrrrum,x
�w r �;�� � : r. � � ..
1a�ny V�xt titrc��:� 'hcc:f"1i��c>�stiati��� i�scLLvrr :` )�ra*ct�>r'�r„�u i'?�'�k?�1� �' 1p�tii,��`I �I2 t� ,,-S°`��'��{}�
tvanboekel@cityofredding.or� btippin@cityofredding.org
SUBJECT: 4.3(a)--Endpoint Security Replacement
Recommendation
Authorize the City Manager to finalize contract negotiations and execute a three-year agreement
with the Center for Internet Security, in an amount not to exceed $222,'750, for endpoint security
protection and 24x7x365 endpoint monitoring services for the City of Redding.
Fiscal Impact
There will be no fiscal impact as a result of this agreement. Funds for end point security were
appropriated during the City of Redding's Biennial Budget 2023-25 process. Additionally, due to
increased services that would be provided by the Center for Internet Security (CIS), the City of
Redding's (City) Information Technology (IT) Department wi11 realize savings by terminating
agreements for other duplicative cyber security solutions.
Alternative Action
The City Council could chaose to not approve this contract with CIS and provide alternative
direction to staff.
Background/Analysis
IT currently utilizes Carbon B1ack for the City's cyber security endpoint protection. In the past,
the City would purchase its Carbon Black licenses and support from Dell; however, due to
corporate ehanges and restructuring, Dell announced they would no longer renew our Carbon
Black support. As of now, our support is scheduled to expire on June 16, 2024.
It is imperative that the City retain a strong cyber security posture which means a new endpoint
security solution must be acquired. After reaching out to other government agencies the City's
Cyber Security Officer discovered a solution provided by CIS, CIS is a nonprofit, community
driven organization that is dedicated to making the Internet a safer place. They receive funding
Report to Redding City Council May 1, 2024
Re: 4.3(a)--Endpoint Security Replacement Page 2
from the Department of Homeland Security and other federal sources that subsidizes the cost of
resources and services such as their Endpoint Security Services (ESS). CIS resources and
services are provided to state, 1oca1, tribal, and territorial government entities for reduced cost or
sometimes free. The City already takes advantage of the Multi-State Information Sharing and
Analysis Center and CIS Benchmarks provided by CIS.
CIS ESS utilizes best-in-class, endpoint protection from CrowdStrike, CrowdStrike partnered
with CIS to provide security services to approved governments agencies, such as the City.
Through ESS, the City would be able to leverage various cyber security solutions such as
CrowdStrike's Falcon Prevent, Falcon Insight, Falcon Spotlight, Falcon Discover, Falcon Device
Control, and Falcon Firewall Management at a discounted price. Additionally, CIS ESS provides
a 24x7x365 Security Operations Center to monitor endpoint security, provide threat hunting,
malware analysis, and incident response. As the City and its operations become more technology
focus, services such as this monitoring are extremely valuable.
As proposed, the City Manager would negotiate a contract between the City and Center for
Internet Security to provide endpoint cyber security solutions and 24x7x365 endpoint monitoring
services for a three-year term in amount not to exceed $222,750.
Envi�^onmental Review
This is not a project defined under California Environmental Quality Act, and no future action is
required.
Council PrioNity/City ManageN Goals
• Government of the 21St Century — `Be relevant and proactive to the opportunities and
challenges of today's residents and workforce. Anticipate the future to make better
decisions today."