Agenda Item No: N.10
AGENDA REPORT
DATE: October 21, 2025
TO: Mayor and Council
FROM: David Gassaway, City Manager
SUBJECT: Resolution 2025-204 IT Cybersecurity Purchase with ePlus
Approving the Purchase for Security Operations Center, Security Information and Event Management Services, and Managed Risk Services with ePlus, Inc.
Funding Source: $907,031; Computer Fund
Contact: Naveed Ashraf, (707) 428-7542
RECOMMENDED ACTION
Adopt resolution.
STATEMENT OF ISSUE
The City Information Technology (IT) Department is recommending the purchase for the Security Operations Center (SOC) and Security Information and Event Management (SIEM) services , and Managed Risk services renewal from reseller ePlus, Inc.
DISCUSSION
The City’s IT Department requests City C ouncil approval to continue using a 24/7 SOC for cybersecurity event management. The SOC provides continuous monitoring, threat detection, mitigation, event correlation, and protection against ransomware and other malicious cyber threats.
Integrated with our SIEM solution, the SOC addresses critical IT security audit requirements such as event logging, retention, threat monitoring, and provides additional response support during security incidents.
The SOC also works in conjunction with the Managed Risk tool, giving IT visibility into, and the ability to prioritize and remediate, vulnerabilities across applications and IoT devices—including electric vehicle charging stations, CCTV cameras, and traffic signal controllers. With the proliferation of non -standard devices with proprietary hardware and firmware, continuous
monitoring and remediation are essential. This system enables IT staff to track, assign, and report remediation efforts efficiently, with centralized dashboard visibility across the enterprise.
FINANCIAL IMPACT
The renewal will cost a total of $907,030.92 for a five -year term, from November 29, 2025 , to November 28, 2030. The City will purchase under the cooperatively negotiated National Association of State Procurement Officials (NASPO) Master Contract Number: AR2472.
The annual costs are as follows:
Fiscal Year (FY) Cost Time Period
FY 2026 $170,842.23 11/29/2025 – 11/28/2026
FY 2027 $175,968.31 11/29/2026 – 11/28/2027
FY 2028 $181,253.90 11/29/2027 – 11/28/2028
FY 2029 $186,675.68 11/29/2028 – 11/28/2029
FY 2030 $192,290.80 11/29/2029 – 11/28/2030
TOTAL $907,030.92
There are sufficient funds budgeted for this purchase under the Computer Fund’s Cybersecurity Project (OITCYBEROP). By switching from the current vendor to ePlus, the City will save approximately $25,000 this fiscal year.
PUBLIC CONTACT/ADVISORY BODY RECOMMENDATION
N/A
ALTERNATIVE ACTION
Council may choose not to authorize the annual expenditure for cybersecurity operations and event management services. Doing so would leave the City highly vulnerable in an increasingly complex threat landscape and prevent IT staff from effectively monitoring, prioritizing, and addressing vulnerabilities in the hardware and software of systems and applications connected to the City’s network.
COORDINATED WITH
N/A
STAFF CONTACT
Brian Lew, Cybersecurity Analyst
(707) 428-7525
[email protected]
ATTACHMENTS
Attachment 2: Proposed Resolution
Attachment 3: Proposed Quote