Fremont City Council Meeting: 05/02/23 07:00 PM
3300 Capitol Avenue Div/Dept: Information Technology Services Fremont, CA 94538 Category: Agreements and Contracts
SCHEDULED
Sponsors:
COUNCIL STAFF REPORT (ID # 4857) DOC ID: 4857
Updated: 4/26/2023 3:42 PM by Susan Gauthier Page 1
ENDPOINT DETECTION AND RESPONSE (EDR) SOFTWARE RENEWAL - Authorize the City Manager, or Designee, to Issue a Purchase Order and to Execute Implementing Documents with ePlus Technology, Inc., for the Annual Software Licenses of the Crowdstrike Endpoint Detection and Response (EDR) Solution.
Contact Persons:
Name: David Yu Sanford Taylor
Title: Infrastructure Services Manager IT Director
Div/Dept: Information Technology Services Information Technology Services Phone: 510-494-4826 510-494-4802
E-Mail: [email protected] [email protected]
Executive Summary: In FY 2021/22, the City deployed a robust endpoint detection and response (EDR) tool. This technology is used to protect computer hardware devices from potential Cybersecurity threats. The existing software licenses expire on June 02, 2023.
The annual software licenses cost for the Crowdstrike Endpoint Detection and Response (EDR) Solution for the period of June 03, 2023 through June 02, 2024, is $110,158.43. The amount of the annual software licenses exceeds $100,000 and requires City Council approval.
BACKGROUND: The Information Technology Services (ITS) Cybersecurity Program has been continuously expanding and improving the City’s capabilities to monitor in real -time city-wide information system assets for anomalies and malicious behaviors, which result in the detection and reductions in response time to cyberthreats, such as malware, ransomware, distributed denial of service (DDoS), spoofing, backdoor, tampering, spam, and phishing attacks. In addition, the ITS Cybersecurity Program has been improving the City information systems and data backup practices by investing in modern backup and recovery technologies. This ensures a secure and current City information systems backed- up data storage and optimized system restoration process in the event of cyber-attack and/or data loss. The program also focuses on communicating cybersecurity trends and cybersecurity best practices to City Staff and to equip them with the information they need to become human firewalls.
One of the tools deployed to protect City technology assets and network infrastructure is an Endpoint Detection and Response (EDR) Solution: Crowdstrike Falcon Complete Solution.
DISCUSSION/ANALYSIS: In March 2021, City staff developed a Request for Proposals (RFP) that was issued and posted on Periscope Holdings (BidSync.com). In response to the RFP, the City received six proposals.
After evaluation, the City selected the top proposer— CrowdStrike, Inc. as the Endpoint Detection and Response (EDR) Solution provider that best meets the needs for real-time security threat reporting, threat detection, adaptive security, dynamic data protection, and automated incident response to potential cybersecurity threats to the City.
Council Staff Report (ID # 4857) Meeting of May 2, 2023 Updated: 4/26/2023 3:42 PM by Susan Gauthier Page 2
The Falcon Complete Solution from CrowdStrike, Inc. provides the City with:
• Next generation anti-virus which incorporates Artificial Intelligence/Machine Learning techniques.
• 24 x 7 management, monitoring, response, and threat hunting. • Identify security threats and prevent security breaches. • Machine learning for malware protection, indicator of attack (IOA) behavioral blocking and exploit blocking.
• Advanced Firewall Management.
The solution provides a cost-effective way to monitor cyberthreats with limited cybersecurity resources available. The Crowdstrike Falcon Complete solution analyzes over 2.5 trillion endpoint-related events per week in real time from all over the world. By leveraging this massive database, the solution ensures that incidents are handled in a timely manner, and drastically reduces the risks of a serious breach.
The solution also provides extensive capabilities to create custom reports and dashboards on threat alerts, intelligence, technical and C-Level reports, that enable the City to have greater overall visibility of current potential cybersecurity threats facing the City.
The Crowdstrike Falcon Complete endpoint detection and response solution which is deployed in the City’s network infrastructure is a critical tool for the ITS Cybersecurity Program’s success against cyber security threats. Consequently, staff is recommending renewing the software licenses for an additional two years. Software license renewal is exempt form competitive purchasing requirements pursuant to Fremont Municipal Code section 3.20.280(c).
FISCAL IMPACT: Funds are appropriated for the Annual Software Licenses of the Crowdstrike Endpoint Detection and Response (EDR) Solution in the Information Technology Services Department Operating Fund FY 2022/23 operating budget (Fund 620). Funding for subsequent years will be requested as part of the City’s annual budget process.
ENVIRONMENTAL REVIEW: The renewal of computer software licenses is exempt from and not subject to review under the California Environmental Quality Act (CEQA) be cause, without limitation, it is not a “project” as defined in CEQA Guidelines Section 15378(b)(2) and/or 15378(b)(5) and as it can be seen with certainty that there is no possibility that the activity may have a significant effect on the environment per CEQA Guidelines Section 15061(b)(3), each as a separate and independent basis for CEQA compliance
ATTACHMENTS: None.
LINKS: None.
RECOMMENDATION: Authorize the City Manager, or designee, to issue a purchase order and to execute implementing documents with ePlus Technology, Inc., for the Annual Software Licenses of the Crowdstrike Endpoint Detection and Response (EDR) Solution in the amount not-to-exceed $110,158.43.