DATE:
June 18, 2024
TO:
Paul Buddenhagen, City Manager
FROM:
Michael Parenti, Information Technology Director
SUBJECT:
Resolution Of The City Council Of The City Of Emeryville Authorizing The City Manager To Issue A Purchase Order To Executech For The Renewal Of The Arctic Wolf Security Suite For A Period Of Up To Three Years And A Total Not To Exceed $173,748.97 Recommendation
Staff recommends the City Council of the City of Emeryville adopt the attached resolution authorizing the City Manager to issue a Purchase Order to Executech for the renewal of the Arctic Wolf Security Suite for a period of up to three years for a total not to exceed $173,748.97.
Background
In March 2023, IT staff began the process of evaluating network security providers. After discussion with several security consultants and researching other local agency selections, staff narrowed down the selection to two potential vendors: Arctic Wolf and Dark Trace. A fully functional trial of Dark Trace was implemented and tested. After completing the testing and further interviews, IT staff concluded Arctic Wolf was the best fir for the City and began negotiations with one of Arctic Wolf’s government authorized resellers, Executech.
In June 2023, the City entered into an agreement with Arctic Wolf Networks, Inc. for a security suite package for network monitoring, detection and response, risk assessment and security awareness training. The Arctic Wolf Security Suite has been a critical component of the City’s cybersecurity strategy since the contract was established. Executech is the City’s authorized reseller of the Arctic Wolf Security Suite.
Discussion
With the recent rise in cyberattacks targeting various cities in the state, cybersecurity is critically important to the city. Arctic Wolf provides a range of services including:
Managed Detection and Response (MDR): Real-time threat detection and incident response.
This includes 24/7 monitoring off all network traffic, allowing for immediate response to any cyberattack detected.
Managed Risk (MR): Risk assessment and mitigation.
This service includes continuous evaluation of the city’s network infrastructure and advice on remediating any potential weak points discovered. This also provides the city access to consult with security professionals to discuss upcoming project or changes to its environment.
Managed Security Awareness (MA): Employee training and awareness programs.
This program provides training to all city staff on cybersecurity awareness as well as specialized training and seminars for IT staff.
In addition to the above, the solution meets the needs of cybersecurity requirements for insurance and auditing purposes and provides up to $1,000,000.00 in financial assistance for recovery activities, legal and regulatory expenses, and other associated business costs in the event of a cyber-attack.
Fiscal Impact
Funding for this service will come from the Technology Fund (670-77150).
Staff Communication with the Public
There has been no staff communication with the public.
Conflict of Interest
There are no known conflicts of interest.
Conclusion
Staff recommends the City Council authorize the City Manager to issue yearly purchase orders to renew the Arctic Wolf service for up to three consecutive years.
PREPARED BY: Michael Parenti, Information Technology Director Approved and Forwarded to the
City Council of the City of Emeryville:
Paul Buddenhagen, City Manager
Attachments
Attachment A – Vendor Quote
Attachment B – Original Contract
Draft Resolution
Arctic Wolf Renewal
City Council Meeting | June 18, 2024
City of Emeryville
CALIFORNIA
MEMORANDUM