Cities Index.
Agenda packet, first session

Livingston City Council
July 7, 2026

Document
Agenda packet, first session
Meeting
July 7, 2026
Body
Livingston City Council
Pages
41
Original file
51.8 MB
Text extracted from the city's file for reading and search. Open the original on www.cityoflivingston.org. That file is the official record.

The proposed onsite and recurring support personnel include:

Resource Proposed Role Relevant Experience Summary
Joseph
Stokes
Senior Systems /
Network
Engineer
More than 15 years of system administration experience, including Windows Server, Microsoft 365, Intune, RMM/MSP tools,
NinjaOne, Wazuh security, Datto backup, Barracuda spam filtering, VPN support, MDM, ticketing platforms, and municipal public safety technology support. His City of San Antonio experience included NetMotion VPN support for police/fire vehicles, CAD software support, vehicle camera support, and wireless/network infrastructure support for city buildings.

Florian
Andrade
Field Support /
L2 Systems
Engineer
MSP and systems engineering experience across Microsoft 365, Azure Active Directory, Windows Server, Hyper-V, ConnectWise, ITGlue, Kaseya, backups, disaster recovery, Active Directory, Group Policy, endpoint support, asset tracking, procurement policies, and desk-side support. His experience includes California-based MSP work and multi-client support environments.

Brandon
Edgar
Help Desk /
Technical
Support
Specialist
Tier I/Tier II support, service request prioritization, Microsoft Office support, documentation, technical records, Active Directory, DHCP, DNS, NTP, Cisco/Brocade switch configuration, VLAN support, cybersecurity practices, and technical training. Holds ITIL Foundation v4, CompTIA A+, Network+, Security+, and DoD 8140 IAT Level II compliance.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Thomas
Wolfe
vCIO / Security
& Compliance
Advisor
Senior IT management and cybersecurity risk leader with outsourced CIO experience, IT strategy, cybersecurity governance, regulatory compliance, disaster recovery, business continuity, vendor management, IT financial modeling, and government technology project experience. Holds CISSP, CISA, Security+ CE, Network+ CE, MCP, and MCTS credentials.

Ngum
Che
Cybersecurity
Risk Advisor
Cybersecurity and GRC leader with experience in NIST CSF, NIST 800-53, NIST 800-171, FedRAMP, FISMA, HIPAA, ISO 27001, SOC 2, PCI DSS, CMMC, incident response planning, disaster recovery/business continuity planning, risk registers, vulnerability management, and executive risk reporting. Holds CISA, AWS Solutions Architect Associate, Security+, Splunk Core Certified User, and Splunk Certified Power User credentials.

No Consultadd personnel will access CJIS-covered systems until all City-required background checks, fingerprinting, CJIS Security Addendum signing, and related security requirements are completed. 3e. Help Desk Staff Job Requirements
Help desk staff assigned to the City of Livingston will meet the following minimum requirements:

1. Hands-on IT support experience in a managed services, public-sector, or enterprise environment

2. Working knowledge of Windows workstation support, Microsoft 365, Outlook, Teams, OneDrive, SharePoint, and common end-user applications

3. Ability to troubleshoot password, MFA, remote access, VPN, printer, peripheral, and workstation issues

4. Familiarity with ticketing systems, ticket documentation, priority assignment, SLA tracking, and escalation workflows

5. Clear communication skills for working with users across City departments and technical skill levels

6. Ability to follow documented procedures, security policies, and change control expectations

7. Familiarity with mobile device support, with JAMF and Apple Business Manager experience preferred for this engagement

8. For any staff assigned to Public Safety systems, ability to complete required fingerprinting, criminal history checks, CJIS Security Addendum signing, and CJIS-related training before access is granted
3f. Staff Development and Training Programs
Consultadd invests in ongoing staff development to maintain service quality, technical currency, and security awareness across client engagements. Training and development activities include:

1. Technical certification support for Microsoft, CompTIA, ITIL, cybersecurity, cloud, and infrastructure disciplines

2. Security awareness training for all staff, with CJIS-specific training for personnel assigned to applicable public safety environments

3. Internal knowledge-sharing sessions on emerging security threats, infrastructure practices, Microsoft 365 administration, endpoint management, and service delivery lessons learned

4. Vendor platform training for tools and environments relevant to client support, including Microsoft 365, endpoint management, firewall, backup, and remote monitoring platforms City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected]

5. Service management training covering ticket documentation, escalation, SLA tracking, customer communication, and problem management

6. Cross-training across help desk, field support, systems administration, network support, and cybersecurity functions to reduce single-person dependency and improve coverage continuity City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 4: Security
4a. Company Security Certifications
Consultadd Public Services maintains a security-conscious delivery model supported by organizational security controls, trained personnel, documented access practices, and experience supporting compliancesensitive public-sector environments. Current company-level certifications and credentials relevant to the City of Livingston are summarized below.

Certification /
Credential
Current
Status
Year
Originally
Obtained
Relevance to the City of Livingston
SOC 2 Type II Active 2024 Supports third-party validated controls related to secure service delivery, availability,
confidentiality, and operational discipline
ISO/IEC 27001:2022 Active 2025 Supports Consultadd’s information security management practices, including policy, risk
management, access control, and continuous
improvement
GSA Multiple Award
Schedule (MAS)
Active 2025 Demonstrates Consultadd’s approved federal
IT services schedule for information
technology professional services, cloudrelated IT professional services, and temporary staffing
Microsoft Cloud
Solution Provider /
Indirect Reseller
Active 2025 Relevant to the City’s Microsoft 365, Entra ID, Windows Server, and Microsoft
ecosystem support needs
AWS Advanced Tier
Partner
Active 2025 Relevant to optional cloud, backup,
modernization, and disaster recovery advisory
support
CMMC Readiness /
Cybersecurity
Program Alignment
Active
internal
readiness
2024 Relevant to Consultadd’s cybersecurity
maturity, access control practices, and support
for compliance-sensitive environments
Consultadd will provide supporting documentation for applicable company-level certifications upon request or as part of contract execution.
4b. Staff Security Certifications
Consultadd’s proposed team includes senior security, compliance, systems, network, and help desk personnel with certifications and experience relevant to the City’s environment. The team has been selected to support the City’s Windows, Microsoft 365, Hyper-V, network, backup, endpoint, and public safety support needs.

Proposed
Resource
Proposed Role Relevant Security / Technical Credentials Thomas
Wolfe
vCIO / Security &
Compliance Advisor
CISSP, CISA, Security+ CE, Network+ CE, Microsoft
Certified Professional, Microsoft Certified Technology
Specialist
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Ngum Che Cybersecurity Risk
Advisor
CISA, AWS Certified Solutions Architect Associate, CompTIA Security+, Splunk Core Certified User, Splunk Certified Power User
Joseph
Stokes
Senior Systems /
Network Engineer
A+ Certification, Network+ Certification, security awareness training, current Security+ / CCNA coursework
Brandon
Edgar
Help Desk /
Technical Support
Specialist
ITIL Foundation v4, CompTIA A+ CE, CompTIA Network+
CE, CompTIA Security+ CE, DoD 8140 IAT Level II
compliant
Florian
Andrade
Field Support / L2
Systems Engineer
Systems engineering experience across Microsoft 365, Azure Active Directory, Windows Server, Hyper-V, ConnectWise, ITGlue, Kaseya, backups, disaster recovery, and endpoint support
All staff assigned to Public Safety systems, CLETS-connected systems, or CJIS-covered environments will complete the City-required fingerprinting, criminal history check, CJIS Security Addendum signing, and related CJIS security requirements before access is provisioned. 4c. Background Checks
Consultadd conducts background checks for personnel assigned to client environments. Standard checks include identity verification, criminal background review, employment verification, reference validation where applicable, and review of role-specific access requirements.

For the City of Livingston, Consultadd will follow the City’s Public Safety and CJIS access requirements before any applicable system access is granted. This includes:

1. Criminal history check and fingerprinting conducted through the City of Livingston Police Department for all applicable personnel
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected]

2. CJIS Security Addendum signing by personnel with direct or indirect access to CJIS-covered systems

3. Completion of required CJIS-related training and security awareness requirements before system access is provisioned

4. Use of unique, individually attributable usernames for all contractor personnel

5. Access logging and review to support accountability and auditability

6. Immediate access removal upon staff departure, reassignment, or contract termination Consultadd understands that CJIS requirements apply to all personnel who may have direct or indirect access to CJIS-covered systems, whether onsite or remote. Consultadd will not use an escorted remote access model as a substitute for CJIS compliance.
4d. Security Policies Regarding Client Access
Consultadd’s client access policies are designed to protect City systems, reduce unauthorized access risk, and support accountability across the managed services environment.

Security Practice Consultadd Approach
Least-Privilege
Access
Staff receive only the access needed to perform assigned responsibilities Unique User
Accounts
Shared contractor accounts are not permitted; each staff member uses a unique username
Multi-Factor
Authentication
MFA is required for remote access and administrative access where supported CJIS-Covered
System Access
Access is limited to personnel who have completed City-required fingerprinting, background checks, CJIS Addendum signing, and related requirements
Remote Access Remote support is performed through secure, approved access methods with logging and session accountability
Offshore Access
Restriction
No offshore or non-cleared personnel will access CJIS-covered systems Access Review Contractor access will be reviewed periodically and adjusted when roles change
Access Revocation Access is removed promptly when personnel leave the engagement or no longer require access
Confidentiality Staff are required to follow confidentiality, data handling, and client access policies
For CJIS-covered systems, Consultadd will use a U.S.-based, City-cleared support model. Any global or offshore delivery resources, if used for non-CJIS support activities, will be restricted from CJIS-covered systems and will operate only under City-approved access boundaries. 4e. Strategy for Securing Client Data
Consultadd’s data security strategy combines access control, endpoint security, monitoring, patching, backup validation, incident response, user awareness, and documentation. The goal is to support the City’s operational reliability while reducing cybersecurity risk across City Hall, Police Department, Public Works, WWTP, mobile users, and other supported locations.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] i. Staying Informed Regarding Security Alerts and Events Consultadd tracks relevant security alerts and advisories through trusted public and vendor sources, including CISA alerts, Microsoft security advisories, firewall and endpoint security vendor notifications, cloud platform advisories, and threat intelligence from deployed security tools. Security alerts are reviewed for applicability to the City’s environment and prioritized based on severity, exploitability, system exposure, and operational impact.
ii. Notifying and Managing Security Events
Security events are managed through a severity-based incident response process:

Phase Action
Identify Detect event through monitoring tools, vendor alerts, firewall logs, endpoint alerts, or user reports
Triage Classify severity, affected systems, business impact, and whether Public Safety or CJIScovered systems may be involved Notify Notify the City’s designated point of contact based on severity; immediately escalate critical or CJIS-relevant events
Contain Isolate affected systems, disable compromised accounts, block malicious traffic, or restrict access as appropriate
Remediate Remove malicious activity, patch vulnerabilities, reset credentials, restore configurations, and coordinate vendor support
Recover Validate system functionality, restore services, and confirm backup integrity where recovery is required
Report Provide incident summary, timeline, impact, root cause, remediation steps, and recommended risk reduction actions
If an event involves Public Safety or CJIS-covered systems, Consultadd will follow the City’s escalation requirements and applicable CJIS incident handling expectations. iii. Mobile Device Security
The City’s Q&A confirms that the City uses JAMF to manage City-owned iOS devices enrolled through Apple Business Manager. Consultadd will support the existing mobile device management model by assisting with device enrollment, blueprint assignment, profile management, app support, update coordination, lost-device response, and remote wipe coordination where authorized by the City.

Consultadd will support mobile security practices including:

1. JAMF enrollment and device assignment support

2. Configuration profile review and update coordination

3. App management and update support

4. Device inventory validation

5. Lost or stolen device response support

6. Remote wipe coordination where approved

7. User support for MFA, Microsoft 365, and mobile productivity applications iv. Ensuring Security Best Practices Are Followed
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Consultadd will reinforce security best practices through a combination of process, reporting, technical controls, and management review.

Security Area Practice
Patch Management Routine patching for servers and workstations, with critical patch prioritization based on severity
Endpoint Security Endpoint protection monitoring, alert triage, and remediation coordination Identity and Access User lifecycle management, MFA support, least-privilege access, and periodic access review
Backup Security Daily backup monitoring and periodic restorability validation Firewall / Network
Security
Firewall rule review, VPN support, security log review, and vendor coordination
Email Security Coordination with the City’s email security platform and Microsoft 365 controls
User Awareness Security awareness guidance for phishing, password hygiene, MFA, and incident reporting
Reporting Security, patching, backup, and incident activity included in weekly and monthly reporting
Continuous
Improvement
Recurring reviews to identify recurring risks, aging assets, unsupported systems, and improvement opportunities
Consultadd’s security approach is practical and risk-based. We will manage the City’s existing tools where they are operating effectively, recommend improvements where the benefits are clear, and keep all security changes transparent to City leadership.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 5: Services
5a. Desktop Support (Hardware and Software)
• Diagnosis and troubleshooting for hardware failures across 89 workstations (65 desktops, 24 laptops) at six City locations
• Coordination of warranty repairs and hardware replacement procurement • Windows OS support, updates, and configuration management • Microsoft 365 application support: Outlook, Teams, Word, Excel, SharePoint, OneDrive, and related services
• User account management, password resets, and profile maintenance • Peripheral setup and support: printers, monitors, docking stations, scanners, and peripherals • Software installation, updates, and license tracking
• Live Scan Fingerprinting workstation support coordination • JAMF-managed iOS device support (58 phones, 10 iPads; Apple Business Manager enrolled) 5b. Network Hardware and Operating Systems
• WatchGuard firewall management at City Hall/Police Department, WWTP (7160 Gallo Rd), and Well 17
• Cisco, Juniper, and Ubiquiti switch and access point management across all City locations • Network connectivity monitoring and troubleshooting
• VLAN management and network segmentation oversight
• Firmware and security patch management for network devices • Bandwidth and connectivity performance monitoring
• Remote access infrastructure management: Always-on VPN for Police MDTs, Remote PC for general staff remote access
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] • Coordination of ISP and telecom vendor issues
5c. Remote Access Support
• Support for Always-on VPN used by Police Mobile Data Terminals • Support for Remote PC remote access for general City staff working off-site • VPN connectivity troubleshooting and credential management • MFA support for Microsoft Authenticator and hardware authenticators deployed by the City • Remote session troubleshooting for any City staff with connectivity issues 5d. Work Order and Ticket System
Consultadd manages all client support requests through a Professional Services Automation (PSA) platform configured for the City's environment:
• Ticket intake via phone, email, and portal (channels confirmed during onboarding based on City preference)
• Automatic ticket creation with timestamp, priority assignment, and technician assignment • Ticket categorization by service area: hardware, software, network, security, M365, mobile, infrastructure, and project
• SLA tracking from creation through resolution with automated alerts for approaching or missed targets
• Status updates communicated to requesting user at key milestones • Resolution notes and knowledge base documentation captured per ticket • Weekly ticket summary included in routine reporting to the City per RFP requirement 5e. Escalation System for Chronic or Advanced Problems
Tier Primary Resource Handles Escalation Trigger
Tier 1 Help Desk
Technician
Password resets, common software
issues, basic hardware, user guidance,
connectivity troubleshooting
Unable to resolve within
defined time; issue
requires elevated access
Tier 2 Senior Help Desk /
Field Tech
Advanced desktop issues, JAMF/MDM,
M365 admin, network connectivity,
VoIP, onsite hardware
Requires specialized
system knowledge or
vendor coordination
Tier 3 Senior Systems
Engineer
Server, Hyper-V, WatchGuard, security
events, advanced network, backup
failures, root cause analysis
Infrastructure-level issue
or security event
Tier 4 Security and
Compliance Lead /
Vendor Engagement
CJIS incidents, ransomware, advanced
cybersecurity, critical system failures,
vendor escalation
Security event, critical
system down, CJISrelevant incident
The Project Manager (Nisha K.) is notified of all active Tier 3 and Tier 4 escalations and provides status updates to City leadership during active incidents.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 5f. Hours of Operation and Guaranteed Call Response Time Consultadd Public Services provides 24/7/365 help desk support for the City of Livingston. Support is available through phone, email, remote support tools, and ticketing workflows. The proposed service model includes business-hours support, after-hours remote support, and emergency after-hours onsite response for P1/Critical incidents involving covered systems.

The following response targets are proposed for the City of Livingston. These targets will be incorporated into the final service agreement and reported through weekly and monthly service reporting.

Priority Description and Examples Guaranteed
Initial
Response
Time
Target Resolution /
Restoration Approach
P1 /
Critical
City-wide outage, Police Department
system outage, active cybersecurity
incident, ransomware event, major
server failure, City Hall/Police network
outage, or failure affecting critical City
operations
15 minutes,
24/7/365
Immediate escalation to senior
engineering and security
resources; continuous work
until service is restored or a
workaround is approved
P2 /
High
Multiple users impacted, major
application unavailable, firewall/VPN
issue affecting operations, failed backup
requiring urgent review, Police
workstation or MDT issue affecting
field operations
1 hour,
24/7/365
Same-day remediation target
where feasible; escalation to
senior engineer if not resolved
within the initial
troubleshooting window
P3 /
Normal
Single-user workstation issue,
Microsoft 365 issue, printer/peripheral
issue, password/MFA support, standard
remote access issue, routine software
troubleshooting
4 business
hours
Next business day target for
resolution or workaround,
depending on parts/vendor
dependency
P4 /
Low
General questions, scheduled changes,
user guidance, documentation requests,
non-urgent configuration changes
Next business
day
Within 3 business days or as
scheduled with the City
For critical issues that cannot be resolved remotely, Consultadd will dispatch onsite support for covered systems as part of the base managed services model. Non-critical after-hours onsite work requested by the City will be handled under the optional fee schedule.
5g. Help Desk Statistics
Consultadd tracks help desk performance across client engagements and uses these metrics to manage service quality, recurring issues, staffing needs, and user satisfaction. For the City of Livingston, Consultadd will report help desk performance weekly and monthly, including ticket volume, response time, resolution time, SLA compliance, recurring issues, and issue categories.

A recent managed IT and cybersecurity engagement for Marin Housing Authority demonstrates Consultadd’s service performance in a public-sector environment with help desk, endpoint, Microsoft City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 365, backup, cybersecurity, onsite, and remote support needs. In that engagement, Consultadd handled 280 IT support tickets in Q2, achieved an average first response time of 18 minutes, maintained 94.7% SLA first response compliance, maintained 93.0% SLA resolution compliance, supported zero critical P1 incidents, and resolved 97% of tickets each month.

For Livingston, the following metrics will be tracked and reported:

Metric Reporting Purpose
Total tickets opened
and closed
Shows service volume and support demand
Average initial
response time
Shows responsiveness by priority level
Average resolution
time
Shows effectiveness and workload complexity
SLA compliance by
priority
Shows whether support commitments are being met
Ticket category
breakdown
Identifies common issue types such as Microsoft 365, endpoint, network, mobile, backup, or application support
Repeat or recurring
issues
Supports root cause analysis and problem management
First-contact resolution
rate
Shows how many issues are resolved without escalation
After-hours incidents Tracks critical support demand outside normal business hours Backup and patch
exceptions
Provides visibility into operational risk areas
User and department
trends
Helps identify departments needing additional support, training, or technology improvements
These statistics will be included in the City’s weekly operations reports and monthly service reviews. 5h. Availability of Key Staff During Normal Business Hours Consultadd’s service model gives the City access to day-to-day support resources and senior technical escalation during normal business hours.

Role Availability During Normal
Business Hours
Support Focus
Project Manager /
Service Delivery
Manager
Available during business hours for
service coordination, reporting, and
escalation
Service governance, SLA review,
City communication, issue tracking
Field Support / L2
Systems Engineer
Scheduled onsite three times per
week, three hours per visit; available
for approved additional onsite needs
Endpoint support, hardware setup,
user assistance, documentation, onsite
troubleshooting
Help Desk /
Technical Support
Specialist
Available through help desk channels Ticket intake, Microsoft 365 support, password/MFA support, user
assistance, remote troubleshooting
Senior Systems /
Network Engineer
Available for escalations and
scheduled infrastructure work
Windows Server, Hyper-V, network
support, VPN, backups, Microsoft
365, public safety technology support
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] vCIO / Security &
Compliance Advisor
Available for scheduled advisory
sessions and escalations involving
security, risk, governance, or
strategic planning
Roadmap support, risk review,
DR/BCP, cybersecurity governance
Cybersecurity Risk
Advisor
Available for scheduled security
reviews and incident support
Incident response planning, risk
register, security review, backup/DR
validation support
Although the RFP references Terminal Server expertise, the City’s Q&A confirms that the City does not currently use Microsoft Terminal Server. Consultadd’s assigned staff have experience supporting remote access, VPN, Microsoft 365, Windows Server, Hyper-V, and endpoint environments, which align to the City’s current support needs.
5i. After-Hours Support
Consultadd provides after-hours support as part of the managed services model. The after-hours model is designed to prioritize urgent events that affect City operations, public safety systems, cybersecurity, server availability, network access, backup integrity, or multi-user service availability.

After-hours support includes:

1. 24/7/365 help desk access for urgent issues

2. 15-minute guaranteed initial response for P1/Critical incidents

3. Senior Systems / Network Engineer escalation for infrastructure issues

4. Security escalation for suspected cybersecurity events, ransomware, unauthorized access, or CJIS-relevant concerns

5. Emergency after-hours onsite support for P1/Critical incidents involving covered systems where remote resolution is not sufficient

6. Next-business-day handling for non-critical issues unless the City requests after-hours onsite support under the optional fee schedule
After-Hours Scenario Included in Base
Monthly Fee?
Notes
P1/Critical remote response Yes Included 24/7/365
P1/Critical onsite response for
covered systems
Yes Included when onsite response is
necessary to restore or stabilize covered
systems
P2/High remote response Yes Included 24/7/365 based on priority Non-critical after-hours onsite
work requested by the City
No Billed under optional fee schedule
Scheduled after-hours
maintenance
Yes, when related to
covered routine support
Major projects or migrations may be
scoped separately
Council meeting A/V operation No Priced separately as optional A/V support
This structure gives the City emergency coverage while keeping non-critical after-hours work and optional meeting support transparent.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 5j. Penalties and Accountability for Missed Response Times Consultadd supports performance accountability through SLA tracking, reporting, root cause review, and corrective action. If guaranteed response times are not met, Consultadd will document the miss, identify the cause, report it in the monthly service review, and implement a corrective action plan.

Consultadd’s proposed accountability model includes:

SLA Issue Corrective Action
Single missed response target Documented in monthly report with cause and corrective action
Repeated missed response targets in the
same category
Root cause review and escalation to Project Manager /
Service Delivery Manager
Recurring service-level misses across
multiple categories
Executive Sponsor review and written service
improvement plan
City-impacting SLA failure Formal service review with City leadership and agreed remediation actions
Consultadd is open to discussing mutually agreed service credits or other service-level remedies in the final services agreement. At a minimum, every missed guaranteed response target will be tracked, reviewed, and addressed through documented corrective action. 5k. On-Site Support Representative
Based on the Q&A clarification from the City, Consultadd will provide on-site support on a schedule of three visits per week, three hours per visit. On-site activities include:
• Hardware setup, installation, and physical replacement • Network cabling, device installation, and physical infrastructure tasks • In-person end-user support for issues requiring physical presence • Workstation imaging, refresh, and deployment
• Onsite coordination for scheduled maintenance windows • Council meeting A/V support if the optional scope is awarded • Physical walkthrough of infrastructure, open issues, and change documentation during each visit Onsite visits will be scheduled in coordination with City staff to maximize availability for open work and planned activities. A weekly schedule will be shared with the Project Manager and City point of contact. 5l. Advanced Help Desk Skill Sets
• Hyper-V virtualization management (4 physical servers, 8 VMs at City Hall and Police Department) • Microsoft 365 administration including Exchange Online, Teams, SharePoint, OneDrive, and Entra ID
• WatchGuard firewall management and VPN configuration
• Microsoft Entra ID (formerly Azure AD) and identity lifecycle management • JAMF MDM for iOS device management (Apple Business Manager enrolled fleet) • Always-on VPN and Remote PC troubleshooting and administration • VoIP system support and troubleshooting
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] • Cisco, Juniper, and Ubiquiti network device administration • Inky spam filtering coordination and alert management • Backup and DR management for cloud-based backup environments • CJIS-compliant support practices for Police Department and public safety systems 5m. Client Training
Consultadd provides end-user orientation and training support for City staff. Activities may include:
• Onboarding orientation for new City employees on common support procedures and help desk intake channels
• End-user guidance on Microsoft 365 features relevant to daily City operations (Outlook, Teams, OneDrive, SharePoint)
• Security awareness guidance covering phishing recognition, password hygiene, and incident reporting • Coordination with third-party training vendors for formal application training where needed Training recommendations will be tailored based on common support patterns identified during the first 90 days.
5n. Backup Support
The City currently maintains daily backups to cloud with approximately 2.3TB of backup data. A restorability test has been completed within the past year. Consultadd will manage and monitor the City's backup operations:
• Daily monitoring of backup job completion status
• Immediate alerting for backup failures or incomplete jobs • Coordination of periodic restorability testing on a defined cadence to validate recovery capability • Documentation of backup coverage, retention periods, and recovery procedures • Assessment during onboarding to confirm backup scope aligns with City recovery expectations • Recommendations for backup enhancements (e.g., extended retention, additional copy, monitoring improvements) presented as optional services with defined costs 5o. Disaster Recovery Support
• Documentation of current recovery procedures for critical systems at City Hall, Police Department, and WWTP
• Development and maintenance of a DR runbook covering recovery priority order, recovery steps, and emergency contact information
• Coordination of periodic DR testing to validate recovery time and recovery point expectations • Post-incident review and DR plan updates following any disruption • Integration of backup validation results into the overall DR readiness picture Specific recovery time and recovery point objectives will be validated during discovery based on the City's operational priorities and existing backup infrastructure.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 5p. Major Software Upgrades
• Upgrade plans reviewed with City stakeholders before any deployment begins • Testing conducted in a controlled or off-hours window where operationally feasible • Scheduled maintenance windows communicated to City staff with advance notice • Rollback plan documented before any major upgrade is applied • Post-upgrade validation and monitoring for a defined stabilization period Routine updates and security patches are included in the base monthly fee. Major infrastructure upgrades such as server OS migrations or new application deployments are proposed separately under optional fees with a defined scope, timeline, and cost before any work begins. 5q. Patch Management
• Critical and high-severity security patches: deployed as quickly as feasible following vendor release, testing, and City notification
• Monthly patch cycle: all standard OS and application patches deployed on a defined monthly schedule
• Server patching: conducted during defined maintenance windows to minimize operational impact • Workstation patching: deployed during off-hours or low-activity periods using RMM automation • JAMF-managed iOS devices: managed separately through Apple Business Manager and JAMF update policies
• Patch reporting: patch compliance status for servers and workstations included in weekly reports Patch management covers the City's Hyper-V environment (4 physical servers, 8 VMs), 89 Windows workstations, applicable network devices, and Microsoft 365-connected services.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 5r. Network Downtime Scheduling and Communication
• Minimum 48-hour advance notice for planned maintenance windows requiring network downtime • Off-hours scheduling preferred for any maintenance that impacts user connectivity • Pre-maintenance notifications to City management and impacted staff via email and phone • Defined start and estimated completion times communicated before work begins • Status confirmation to City staff at maintenance completion • Emergency network downtime communicated immediately with an estimated restoration timeline City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 6: Monitoring
6a. Monitoring Tools and Strategies
Consultadd deploys a Remote Monitoring and Management (RMM) platform as the foundation of its 24/7/365 monitoring capability. The RMM platform covers all City-managed infrastructure including servers, workstations, network devices, firewalls, and backup jobs.

Monitoring
Category
What Is Monitored Alert and Response
Server and VM
Health
CPU utilization, memory, disk capacity,
uptime, critical services, and event logs for all
Hyper-V hosts (3 physical) and VMs (8) at
City Hall and Police Department
Alert to on-call engineer;
immediate investigation for
critical thresholds
Network and
Firewall
WatchGuard firewalls at 3 City locations;
switches and access points across all six City
sites
Alert to on-call technician;
escalation for persistent
connectivity loss
Endpoint Health Online/offline status, disk health, OS events for 89 Windows workstations
Flagged in ticket queue for
next available technician or
immediate response based on
severity
Backup Jobs Daily backup completion status for City's
cloud backup environment (approximately

2.3TB)
Immediate alert and
investigation for failed or
incomplete backup jobs
Security Events Firewall logs, endpoint protection alerts, failed login attempts, and policy violations
Triage and response per
incident severity; CJISrelevant events handled per
CJIS Security Policy
requirements
Application and
Services
Key server services and application
availability
Alert and automated restart or
escalation as applicable per
service type
6b. Communicating Monitoring Results to the City
• Weekly reports: monitoring activity summary, alerts triggered, actions taken, open issues, patch status, and backup status per RFP requirement
• Real-time alerts: critical events including system down, backup failure, and security events are communicated to the City's designated point of contact immediately upon detection • Monthly operational review: summary of monitoring trends, recurring issues, and infrastructure health presented to City management
• On-demand reporting: City management may request monitoring status summaries at any time City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 7: Management
7a. Reporting on System Status, User Needs, and Change Recommendations Report Frequency Audience Contents
Weekly Operations
Report
Weekly City IT point of contact
/ City Manager
System monitoring summary, help
desk activity, patches applied,
backup status, security events,
open issues, and planned activities
Monthly Service
Review
Monthly City management SLA performance, ticket volume
and category trends, recurring
issues, infrastructure health,
upcoming work, and risk items
Quarterly Business
Review
Quarterly City leadership / City
Manager
Strategic technology review, 12-
month roadmap progress, lifecycle
alerts, budget considerations, and
security posture summary
Incident Report As needed City point of contact
and leadership
Root cause, impact timeline,
remediation steps, and prevention
recommendations
7b. Changes in Technicians Assigned to the Contract
Consultadd recognizes that staffing continuity is a scored criterion in the City's evaluation. Our technician change process:

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] • Minimum 30 days advance written notice to the City for any planned technician change where operationally feasible
• Structured knowledge transfer period during which incoming and departing staff overlap on the engagement
• Introduction of new staff to City points of contact before they assume primary responsibilities • Full documentation of current-state infrastructure, open issues, and institutional knowledge before any transition
• Project Manager (Nisha K.) maintains continuity of service oversight and City relationship management through any personnel transitions
7c. IT Strategic Planning
Consultadd provides IT strategic planning as a core element of the managed services engagement:
• 12-month technology roadmap developed during initial onboarding and updated annually at the yearend quarterly business review • Hardware and software lifecycle tracking with refresh recommendations and budget estimates • Technology assessments identifying gaps, risks, and modernization opportunities aligned to the City's budget and operational priorities
• Proactive identification of end-of-life systems, unsupported software, and compliance risks before they become operational issues
• Vendor and contract management support covering license renewals, support contract tracking, and purchasing coordination
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 8: Documentation, Record Keeping and Reporting
8a. Routine Reporting Procedures
Consultadd's reporting model is built to give City leadership the right information at the right frequency.

All reports are delivered on a defined schedule and archived in the engagement knowledge base:
• Weekly report: system monitoring results, help desk activity, patches applied, backup job status, security events, and open issues per RFP requirement
• Monthly report: SLA performance, ticket volume and category breakdown, recurring issues, infrastructure health, completed project work, and planned activities • Quarterly business review: strategic technology discussion, roadmap progress, lifecycle register updates, budget considerations, and risk summary
Reports are delivered in a format agreed upon with the City, typically PDF or document attachment, and stored in the City's shared knowledge base directory.
8b. System Documentation and Change Records
Consultadd maintains a centralized knowledge base for all City-related documentation. Contents include:
• Network diagrams covering all City locations (City Hall, Police Department, Public Works, WWTP, Well 17, and the sixth location validated during onboarding) • Server infrastructure documentation: Hyper-V host and VM inventory, roles, storage configuration, and hardware specifications for all physical and virtual servers • Application inventory: business applications, versions, license information, support contacts, and system dependencies
• Asset inventory: 89 workstations, 4 physical servers, 8 VMs, 68 iOS devices, and all network devices • Firewall and network configuration documentation: WatchGuard rules, VPN settings, switch configurations, and access point profiles
• Change log: all configuration changes, patching, hardware replacements, and software updates documented with date, technician, and rationale
• Vendor and ISP contact matrix: SCADA vendor, printer vendor, camera and access control vendors, and all ISP and service contacts
• Runbooks: step-by-step procedures for common maintenance tasks, incident response, backup restoration, and emergency escalation
• CJIS access and compliance documentation maintained separately per CJIS Security Policy requirements
All documentation is accessible to City management upon request and updated on a continuous basis as changes occur.
8c. End-of-Contract Transition Documentation
At contract expiration or termination, Consultadd delivers a complete transition documentation package to support continuity under a successor provider or in-house management:
• Current-state network diagrams for all City locations City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] • Server and infrastructure configuration documentation • Complete current asset inventory
• All system credentials, securely transferred through an agreed-upon handoff process • Application inventory, licenses, vendor contacts, and renewal dates • Outstanding open tickets and their current status
• Active project documentation and status
• Runbooks and operational procedures developed during the engagement • Backup and DR documentation including recovery procedures and current backup configuration • CJIS compliance documentation and access records as applicable This documentation package will be finalized and delivered within 30 days of contract termination notice.

Consultadd will support a reasonable handoff period to protect the City's operational continuity during the transition.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 11: Transition
Overview
Consultadd's transition approach is designed to achieve operational continuity from day one, minimize disruption to City services, and build the documentation and access foundation required for long-term service quality. The transition is organized across three phases during the first 90 days.

The transition respects the City's ongoing operations, the sensitivity of Police Department and utility environments, and the staff's time. No Consultadd personnel will access CJIS-covered systems until all required fingerprinting, criminal history checks, and CJIS Security Addendum signing are complete.

Transition Phases
Phase Timeframe Key Activities Deliverables
Phase 1:

Access and
Discovery
Days 1 to 30 CJIS fingerprinting and background
check initiation for all applicable staff
• Secure credential and access
recovery from incumbent provider
or directly from City system owners
• Asset discovery across all six City
locations
• Network, server, and application
documentation baseline
• Stakeholder interviews: City
Manager, Finance Director,
department heads
• Ticket history review if available
from incumbent
Access and credential
register
• Preliminary asset
inventory
• Critical systems map
• Day-30 risk readout to
City management
• CJIS compliance status
report
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Phase Timeframe Key Activities Deliverables
• Backup environment validation
(confirm daily job coverage and
restorability)
• Critical systems mapping for
Police, WWTP, and City Hall
servers
• Monitoring platform deployment
and alert configuration
• PSA ticketing system setup and
workflow configuration
Phase 2:

Stabilization
Days 31 to
60 Monitoring normalization and alert
threshold tuning
• Patch baseline assessment for all
servers and workstations
• Backup validation test and
restorability confirmation
• Incident and escalation workflow
drills with City staff
• Vendor contact matrix finalized
(SCADA, printers, cameras, access
control, ISP)
• Weekly and monthly reporting
cadence established
• Council meeting A/V runbook
developed if optional scope is
awarded
• WatchGuard firewall configuration
documentation completed
Complete asset inventory
• Monitoring dashboard
operational
• Patch compliance
baseline report
• Backup validation
report
• Vendor matrix
• Weekly reporting
initiated
• Infrastructure
documentation draft
Phase 3:

Optimization
Days 61 to
90 12-month technology roadmap
developed and presented to City
leadership
• Security posture review and gap
recommendations
• Documentation completion:
network diagrams, runbooks, server
configs
• Lifecycle register created for
hardware, software, and licensing
end-of-life tracking
• M365 license usage audit for
subscription rationalization
• Optional service recommendations
with cost estimates
12-month technology
roadmap
• Full documentation
package
• Lifecycle register
• First QBR deck
• Optional service
recommendations
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Phase Timeframe Key Activities Deliverables
• First quarterly business review
scheduled
Incumbent Transition
The City has indicated that the current service provider's identity is not being disclosed as part of the RFP process. Consultadd's transition plan is designed to be provider-agnostic and does not depend on incumbent cooperation, although cooperation from the incumbent provider would accelerate the documentation phase.

Key elements of the provider-agnostic transition approach:
• Credentials and access recovered directly from City staff and system owners, not reliant on incumbent handoff
• Independent asset discovery using remote and on-site tooling rather than inheriting incumbent records • Network and server documentation built from live environment inspection • Backup environment validated through direct testing
• CJIS access established independently through the City Police Department process CJIS and Police Department Transition
The Police Department environment requires careful handling during the transition period:
• No Consultadd staff will access CJIS-covered systems until all fingerprinting, background checks, and CJIS Security Addendum signing are fully complete
• CJIS clearance processing is prioritized as the first administrative step following contract award • Physical infrastructure inventory at the Police Department location is conducted under escort for nonsystem access tasks during the clearance window • Police MDT, CLETS, and public safety systems are documented and baselined as soon as CJIS clearances are in place
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 12: Miscellaneous
12a. Additional Certifications, Credentials, and Licenses Certification / Credential Held By Relevance to City of Livingston GSA Multiple Award
Schedule (MAS)
Consultadd Inc. Federal procurement vehicle validating
competitive pricing and delivery capability;
provides future procurement flexibility
SOC 2 Type II Consultadd Inc. Third-party validated security, availability, and confidentiality controls for service delivery
operations
ISO 27001 Consultadd Inc. International information security management system certification
CMMC Ready Consultadd Inc. Cybersecurity Maturity Model Certification readiness supporting compliance-sensitive
public-sector environments
Microsoft Partner Consultadd Inc. Certified Microsoft capabilities relevant to City's M365, Hyper-V, Entra ID, and Windows
environment
AWS Advanced Tier Partner Consultadd Inc. Cloud delivery capability for backup, cloud services, and infrastructure modernization
options
DBE, MBE, SBE, and
related certifications
Consultadd Inc. Supplier diversity certifications supporting the City's contracting objectives
CompTIA Security+,
Network+, A+
Applicable
assigned staff
Foundational security and technical support
certifications
Microsoft 365 and Azure
Certifications
Applicable
assigned staff
M365 administration, Entra ID, and Azure
capabilities for City's Microsoft environment
ITIL Foundation Applicable
assigned staff
Service management framework supporting
structured help desk and escalation practices
CJIS Security Awareness
Training
All staff assigned
to Public Safety
systems
All staff assigned to CJIS-covered systems will
complete required training and clearance before
any Public Safety access is provisioned
12b. What Makes Consultadd Unique
Consultadd Public Services brings a combination of capabilities that align directly with the City of Livingston's evaluation priorities:

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Differentiator Why It Matters for the City of Livingston Cross-department
government operating
experience
The City requires support across City Hall, Police, Public Works, WWTP, and utilities. Consultadd has supported government clients with comparably diverse department mixes, understanding the different risk profiles, access controls, and operational rhythms of each environment.

CJIS-aware public safety
support
Police Department access requires a fundamentally different compliance posture. Consultadd's team completes required CJIS training, signs the Security Addendum, and maintains access discipline consistent with FBI CJIS Security Policy Version 6.0.

Microsoft 365 and HyperV depthThe City's primary environment is Microsoft-centric: M365, Hyper-V, Entra ID, Windows, and WatchGuard. Consultadd's Microsoft Partner status and certified team bring direct expertise in managing this environment.

Incumbent-agnostic
transition approach
Without a confirmed incumbent handoff, Consultadd's plan builds documentation through live discovery rather than inherited records, reducing the risk of knowledge gaps during the critical first 30 days.

Transparent and
predictable commercial
model
A fixed monthly fee with clearly separated optional services gives City leadership budget certainty. All optional and project work requires City authorization before it begins.

Named accountability at
every level
The City can identify the Executive Sponsor, Project Manager, Senior Engineer, and Field Technician by name and understand each person's role before award. There is no generic team structure.
15 years of public-sector
delivery
80+ public-sector clients and 250+ projects provide operational depth that shortens the learning curve and reduces transition risk for the City. 12c. CJIS Security Certificates
Consultadd currently has 50+ employees who hold a current CJIS Security Awareness / CJIS Security Certificate.

For the City of Livingston engagement, all Consultadd personnel assigned to roles requiring physical or logical access to the City’s Public Safety systems, CLETS-connected infrastructure, or CJIS-covered data will complete the City-required fingerprinting, criminal history check, CJIS Security Addendum signing, and any related CJIS training or certification requirements before access is provisioned.

Consultadd’s CJIS access model for the City includes:

1. CJIS-covered access limited to City-approved personnel only

2. No offshore or non-cleared access to CJIS-covered systems

3. Unique and identifiable usernames for all contractor personnel

4. MFA and secure remote access methods where supported

5. Access logging to support auditability and accountability

6. Immediate access removal when personnel leave the engagement or no longer require access

7. Security escalation for any incident involving Public Safety or CJIS-covered systems City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] System access to CJIS-covered systems will not be provisioned to any Consultadd employee or subcontractor until all City-required clearance, training, and access approval steps are complete. 12d. Familiarity with the CJIS Security Policy
Consultadd has direct experience supporting public-sector clients in law enforcement-adjacent environments. Our team's CJIS familiarity includes:
• Working knowledge of the FBI CJIS Security Policy (Version 6.0, dated December 27, 2024) covering access control, personnel security, audit and accountability, media protection, and incident response requirements
• Understanding of CJIS Security Addendum requirements and the signing obligations for all personnel with any logical or physical access to covered systems
• Remote access controls: all remote access to CJIS-covered systems is conducted through encrypted, MFA-protected sessions; no offshore or non-cleared staff may access CJIS systems under any circumstance
• Unique and attributable account management: all contractor staff maintain unique system usernames with full access logging to support audit requirements
• Incident response escalation: immediate notification to the City's designated CJIS System Officer or equivalent contact for any CJIS-relevant security event • No escorted access model: Consultadd's approach requires full CJIS compliance for all staff accessing covered systems, consistent with the City's Q&A response confirming that escorted remote access is not an acceptable substitute
12e. Technology Stack
Stack Category Type / Platform Role for City of Livingston RMM (Remote
Monitoring and
Management)
Professional RMM platform with
24/7/365 monitoring and remote
remediation capabilities
Continuous monitoring of all servers,
workstations, and network devices;
automated alerting; remote support;
patch deployment automation
PSA (Professional
Services Automation)
Enterprise ticketing and service
management platform
Ticket intake, categorization, SLA
tracking, resolution documentation,
weekly reporting, and time tracking
BDR (Backup and
Disaster Recovery)
Backup monitoring and
management tooling
Daily monitoring of City's existing
cloud backup environment (2.3TB);
failure alerting; restorability validation
coordination
Endpoint Protection
(EDR)
Endpoint detection and response
platform
Advanced threat detection and response
for Windows workstations and servers
across all City locations
Email Security Spam filtering platform
coordination
Management and alert review for City's
existing Inky spam filtering
deployment
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Stack Category Type / Platform Role for City of Livingston MFA Platform Microsoft Authenticator and
hardware authenticator support
Supporting the City's current MFA
deployment for all staff and systems
MDM (Mobile Device
Management)
JAMF with Apple Business
Manager
Managing 68 City-owned iOS devices;
blueprint and profile management;
remote wipe; app update enforcement
Identity and Access
Management
Microsoft Entra ID User and group management for 131
M365 licensed users; conditional
access policy management; CJIS-aware
access controls
Network Security WatchGuard firewall
management
Firewall rule management, VPN
configuration, and security log
monitoring for 3 City WatchGuard
firewalls
12f. Incident Response for a Security Event
Phase Actions

1. Identify Detection through monitoring alerts, user reports, or vendor notifications. Initial triage to confirm the event and classify severity. Immediate engagement of the Security and Compliance Lead.

2. Contain Isolation of affected systems, accounts, or network segments to prevent lateral movement. Affected systems taken offline or quarantined if required. CJIS-relevant systems handled per CJIS Security Policy protocols.

3. Communicate Immediate notification to the City point of contact and Project Manager (Nisha K.).

Escalation to Executive Sponsor (Bharat Bhate) for critical events. Notification to City's CJIS System Officer if CJIS-covered systems are involved.

4. Remediate Root cause identification and elimination. Malicious artifacts removed. Systems restored from clean backup where required. All affected credentials reset. Network access re-validated before system reconnection.

5. Recover and
Review
Full service restoration and validation. Post-incident documentation and root cause analysis report delivered to City management. Recommendations to prevent recurrence. Security control updates or runbook revisions as applicable. 12g. Ransomware Incident Response
To the best of Consultadd’s current knowledge, none of Consultadd’s managed IT clients have experienced a ransomware attack in the last 12 months.

If a ransomware event is suspected or confirmed in the City’s environment, Consultadd will follow an immediate, structured response process focused on containment, communication, backup validation, controlled recovery, and post-incident hardening.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Consultadd’s ransomware response process includes:

1. Immediate isolation of affected systems from the network to contain spread

2. Disabling of compromised accounts or access pathways

3. Notification to the City’s designated point of contact and escalation to executive and security resources

4. Assessment of whether Public Safety or CJIS-covered systems may be affected

5. Backup integrity validation before any restoration begins

6. Coordination with the City’s cyber insurance carrier, legal counsel, or external forensic partner if applicable

7. Restoration from clean backup where required

8. Full environment scan before restored systems are reconnected to the network

9. Documentation of the incident timeline, affected systems, recovery actions, root cause, and lessons learned

10. Security control updates, user awareness reinforcement, and runbook updates to reduce recurrence risk
For any ransomware event involving Public Safety systems, CLETS-connected infrastructure, or CJIScovered data, Consultadd will follow the City’s escalation requirements and applicable CJIS incident handling procedures.
12h. Backup Validation Strategy
• Daily backup job monitoring: automated alerts for any backup failure or incomplete job in the City's cloud backup environment
• Monthly backup health review: verification that all critical systems are included in backup scope, that retention periods are being met, and that backup data sizes are consistent with expectations • Periodic restorability testing: scheduled restoration tests to confirm that backup data can be recovered within acceptable timeframes. The City has confirmed a successful restorability test was completed within the past year.
• Restore test documentation: each test is documented with test date, systems tested, recovery time, data integrity result, and any issues identified
• Backup validation report: included in monthly operational reporting to City management Restorability testing cadence will be defined in the services agreement based on the City's requirements and the criticality of covered systems.
12i. Independent Third-Party Penetration Testing
Yes. Consultadd has supported and coordinated independent third-party penetration testing and security assessment activities for client environments. Due to client confidentiality, Consultadd does not disclose client names or sensitive test details in proposal responses.

Consultadd’s role in third-party penetration testing typically includes:

1. Coordinating test scope, timing, and rules of engagement with the client and testing provider

2. Preparing system owners, vendors, and technical contacts for the assessment

3. Supporting secure access and testing windows where required

4. Reviewing findings with the client and third-party tester City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected]

5. Prioritizing remediation actions based on severity, exploitability, and operational impact

6. Tracking remediation through closure

7. Updating documentation, runbooks, and security controls based on validated findings For the City of Livingston, independent penetration testing can be provided as an optional service. If the City elects to proceed, Consultadd will help define scope, coordinate the third-party provider, review findings with City leadership, prioritize remediation, and track corrective actions through completion. 12j. PCI Compliance Familiarity
Consultadd has familiarity with PCI DSS requirements as they apply to managed IT infrastructure.

Relevant practices we apply in applicable client environments:
• Network segmentation support to isolate payment card processing systems from general City IT infrastructure
• Firewall rule review and documentation consistent with PCI DSS network access control requirements
• Patch management cadence aligned with PCI DSS timeframes for critical patch deployment • Access control and logging practices consistent with PCI DSS access management and audit requirements
• Coordination with the City and its PCI Qualified Security Assessor if the City's environment undergoes a formal PCI assessment
Consultadd is not a PCI QSA firm and does not provide PCI certification services. We support the infrastructure management practices that underpin the City's compliance posture. 12k. Additional Cloud Solutions and Technology Options
Consultadd offers the following additional technology solutions as optional services for the City of Livingston's future needs:
• Microsoft Azure cloud services: cloud backup redundancy, Azure Virtual Desktop for business continuity, or cloud-hosted application options for operational flexibility • Microsoft 365 optimization: license usage audit to right-size the City's 131 M365 licenses; Teams telephony options to consolidate VoIP and collaboration into a single platform • Enhanced security monitoring: expanded security event correlation or coordination with a managed SOC for around-the-clock threat monitoring beyond standard RMM security alerting • Digital accessibility readiness: DOJ Title II requires local governments under 50,000 population to meet web and mobile accessibility standards by April 2028. Consultadd can support website accessibility planning in coordination with the City's optional web support scope. • Hardware lifecycle planning: with workstations averaging approximately 5 years in age, a structured refresh plan coordinated through applicable cooperative purchasing vehicles can be built into the firstyear roadmap • Subscription and license rationalization: the City's software subscription obligations can be audited and right-sized during the first 90 days to eliminate unused capacity and reduce costs City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Appendix
A. Key Personnel Resumes
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] May 29, 2026
Monica Cisneros
Deputy City Clerk
City of Livingston
[email protected]
Re: Proposal for Information Technology Services
City of Livingston, California
Dear Ms. Cisneros and Members of the Evaluation Committee:

Consultadd Inc. (dba Consultadd Public Services) is pleased to submit this proposal in response to the City of Livingston's Request for Proposals for Information Technology Services. We understand that the City depends on reliable, secure, and responsive technology operations to serve its community of approximately 14,000 residents across City Hall, Police, Public Works, Water, Wastewater Treatment, and Council operations. This proposal presents our approach to providing stable, accountable managed IT services for the term of the contract.

Founded in 2011, Consultadd Public Services has spent 15 years delivering managed IT services, cybersecurity, infrastructure support, and strategic technology planning to public-sector clients across the United States. We have supported 80+ public-sector organizations, completed 250+ IT projects, and maintain delivery operations in 44 states. Our team understands what it means to support lean government operations where every system matters and the community's services depend on technology running reliably around the clock.

For the City of Livingston, we propose a comprehensive managed IT services model covering 24/7/365 monitoring, on-site support three times per week, CJIS-compliant Police Department support, endpoint and Hyper-V server management, backup oversight, cybersecurity, and strategic planning. We have reviewed the RFP and Q&A responses in detail, and this proposal directly addresses the City's specific environment: its 89-workstation Windows infrastructure, JAMF-managed iOS fleet, WatchGuard firewalls at three locations, Microsoft 365 platform, and CLETS-connected Police operations.

We are confident that Consultadd Public Services brings the operational depth, public-sector experience, CJIS awareness, and California delivery capability to support the City of Livingston from day one. We welcome the opportunity to introduce our team during the interview process.

Respectfully submitted,
Bharat Bhate
Executive Sponsor
Consultadd Inc. (dba Consultadd Public Services)
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Table of Contents
SECTION 1: GENERAL COMPANY INFORMATION ....................................................................... 3 SECTION 2: REFERENCES..................................................................................................................... 5 SECTION 3: STAFFING ........................................................................................................................... 9 SECTION 4: SECURITY......................................................................................................................... 15 SECTION 5: SERVICES.......................................................................................................................... 20 SECTION 6: MONITORING.................................................................................................................. 29 SECTION 7: MANAGEMENT ............................................................................................................... 30 SECTION 8: DOCUMENTATION, RECORD KEEPING AND REPORTING............................... 32 SECTION 9: FEES.................................................................................................................................... 34 SECTION 10: OPTIONAL FEES ........................................................................................................... 37 SECTION 11: TRANSITION .................................................................................................................. 39 SECTION 12: MISCELLANEOUS ........................................................................................................ 42 City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 1: General Company Information
1a. Company Overview
i. Year Started and Years Providing Managed IT Services Consultadd Inc. was founded in 2011. The company has provided managed IT services and help desk support to public-sector clients for 15 years. Consultadd Public Services is the company's dedicated government practice, serving federal, state, and local government clients with a focus on operational reliability, security, and long-term partnership.
ii. Number of Customers and Average Organization Size
Consultadd Public Services has supported 80+ public-sector clients across the United States. Client organizations range from small municipalities similar in scale to Livingston, with fewer than 200 employees and multiple locations, to mid-sized regional authorities and utilities. The City of Livingston, with approximately 106 supported staff across six locations, aligns well with our core municipal client profile.
iii. Number of Employees
Consultadd Inc. employs 600+ professionals, including systems engineers, help desk technicians, security specialists, cloud architects, project managers, and account management staff. The team supporting the City of Livingston will be drawn from this pool, ensuring access to deep technical expertise across all required service areas.
iv. Background and History
Consultadd Inc. was incorporated in 2011 and established its public services practice to address the distinct technology needs of government agencies. Over 15 years, the company has built a national delivery capability with deep expertise in municipal IT operations, public safety technology environments, utility infrastructure, compliance frameworks, and Microsoft ecosystem management.

Key organizational credentials:
• GSA Multiple Award Schedule (MAS) holder
• SOC 2 Type II certified
• ISO 27001 certified
• CMMI assessed
• CMMC Ready
• AWS Advanced Tier Partner
• Microsoft Partner
• Multiple DBE, MBE, SBE, and supplier diversity certifications • 250+ IT projects completed for public-sector clients in the U.S. • Operations supporting clients in 44 U.S. states
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] v. Office Locations
Consultadd Inc. is headquartered at 175 Greenwich Street, 38th Floor, New York, NY 10007.

Consultadd maintains a delivery presence and local office access across 44 U.S. states, including California. Field support and scheduled onsite visits for the City of Livingston will be coordinated through our California delivery network, with resources available for the three-visit-per-week schedule confirmed in the RFP Q&A.
1b. Pending Lawsuits, Judgments, or Liens
No. Consultadd Inc. has no pending lawsuits, judgments, or liens against the organization that would negatively impact its ability to provide managed IT services to the City of Livingston. 1c. Current Investigations
No. Consultadd Inc. is not currently under investigation by any entity.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 2: References
2a. Client References
Consultadd Public Services has selected the following references because they align closely with the City of Livingston’s need for reliable managed IT services, help desk support, cybersecurity, endpoint management, infrastructure support, backup oversight, onsite and remote assistance, and public-sector service continuity.
i. Longest-Supported Client
Item Response
Client Marin Housing Authority
Reference Kim Dolan, IT Director
Email [email protected]
Phone (415) 491-2525 Ext. 704
Duration January 2025 – Ongoing
Services
Provided
Managed IT services, CIO advisory, cybersecurity services, 24/7 monitoring, helpdesk support, network management, endpoint protection, Microsoft 365 backup support, firewall support, infrastructure documentation, onsite support, and remote support Marin Housing Authority is included as Consultadd’s longest-supported reference among the client references provided for this proposal. The engagement is highly relevant to the City of Livingston because it involves full-service managed IT and cybersecurity support for a public agency with compliance obligations, distributed users, endpoint security needs, backup requirements, and a need for consistent help desk responsiveness.

Consultadd’s work for Marin Housing Authority includes centralized endpoint management, Microsoft 365 support, backup protection, firewall support, help desk operations, onsite technician visits, remote troubleshooting, asset tracking, and recurring technology governance through stakeholder meetings and Quarterly Business Reviews. The engagement also demonstrates measurable service performance, including structured ticketing, SLA tracking, average first response time reporting, and proactive infrastructure improvement.
ii. Nonprofit or Other Organization with Similar Support Needs Item Response
Client Marin Housing Authority
Reference Kim Dolan, IT Director
Email [email protected]
Phone (415) 491-2525 Ext. 704
Duration January 2025 – Ongoing
Services
Provided
Managed IT, cybersecurity, helpdesk support, endpoint protection, network management, Microsoft 365 backup, secure remote access, onsite and remote user support, and infrastructure resilience planning
Marin Housing Authority is also relevant to the City’s requested nonprofit or similar-organization reference category because it is a mission-driven public agency with a lean operating environment, compliance-sensitive systems, and a need for stable technology support. Consultadd supports the agency City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] as an extension of its internal team, helping improve system reliability, endpoint visibility, backup readiness, security posture, and user support quality.
iii. Organization with Comparable Infrastructure, Remote Access, and Support Requirements Item Response
Client Madison Metropolitan Sewerage District
Reference Batina Culver, District Manager
Email [email protected]
Phone Available upon request
Duration October 2025 – Ongoing
Services
Provided
24x7 response to Priority 1 tickets, helpdesk support, hardware management, onboarding support, support for COTS systems, support for custom-developed solutions, secure access support, L1/L2 support, ticketing, SLA tracking, reporting, and quality review practices
Madison Metropolitan Sewerage District is included because it reflects a public infrastructure environment with business-critical systems, support needs across standard and operational applications, and a requirement for timely response to escalated issues. This reference is relevant to the City of Livingston’s Public Works, wastewater, utility, hardware, application, and remote support needs.

Consultadd supports MMSD through a structured L1/L2 service model that includes ticket triage, hardware and software troubleshooting, printer and AV support, PC builds, onboarding and offboarding, VPN and Microsoft 365 support, account and access management, application support, centralized ticketing, SLA tracking, reporting, and root cause analysis for recurring priority issues. This experience is directly applicable to Livingston’s need for dependable operational support across departments and systems.
iv. Recently Started Client Since January 1, 2014
Item Response
Client City of Olmos Park, Texas
Reference Ashley Maus
Email [email protected]
Phone 210-824-3281 ext. 303
Duration December 2025 – Ongoing
Services
Provided
Managed IT services, onboarding and transition, help desk support, proactive monitoring, server and network support, cloud platform support, end-user device support, cybersecurity, endpoint protection, email security, MFA, vulnerability assessments, incident response, backup management, disaster recovery planning, business continuity support, reporting, QBRs, and IT roadmap support The City of Olmos Park is included as a recent municipal reference and is highly relevant to the City of Livingston because it reflects direct city government managed IT service delivery. Consultadd’s work for Olmos Park includes stabilizing day-to-day IT operations, improving visibility, supporting critical public safety and administrative functions, strengthening cybersecurity, improving documentation, and supporting a structured transition from the incumbent provider.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] This reference demonstrates Consultadd’s ability to support a small municipal environment with a practical managed services model that includes help desk support, infrastructure management, cybersecurity, backup and disaster recovery planning, regular reporting, quarterly reviews, and long-term technology roadmap development.
v. Additional Relevant Public-Sector Utility and Microsoft Modernization Experience Item Response
Client Municipal Water District of Orange County (MWDOC) Reference Steven Hung, Sr. Financial Analyst / Database Analyst Email [email protected]
Phone Available upon request
Duration Ongoing
Services
Provided
Microsoft Dynamics 365 Finance implementation, ERP configuration, fund accounting setup, data migration from AccuFund, Paylocity integration, reporting enablement, user training, and post-go-live stabilization support
Consultadd Public Services is supporting the Municipal Water District of Orange County with the implementation of a cloud-first Enterprise Resource Planning solution using Microsoft Dynamics 365 Finance. The engagement includes financial system configuration, fund accounting setup, data migration from AccuFund, integration with Paylocity, reporting enablement, user training, and post-go-live stabilization support to modernize the District’s financial and operational workflows.

This experience is relevant to the City of Livingston because it demonstrates Consultadd’s ability to support a California public-sector water agency with mission-critical business systems, financial operations, data migration, user adoption, and stabilization after go-live. While this engagement is separate from the City’s requested managed IT and help desk reference categories, it reinforces Consultadd’s broader ability to support public agencies that operate utility-related services, finance functions, Microsoft-based platforms, and operational systems that require careful coordination, documentation, and continuity.

For Livingston, this experience strengthens Consultadd’s understanding of public-sector utility environments and the need to balance daily technology support with long-term modernization planning across administration, finance, public works, water, and wastewater-related operations. 2b. Vendor References
Consultadd Public Services maintains active vendor relationships that support public-sector managed IT services, Microsoft licensing, cloud infrastructure, endpoint management, cybersecurity, hardware procurement, and service delivery. The vendor references below meet or exceed the City’s requested annual obligation threshold of $48,000.

Vendor
Reference
Services / Products Annual
Obligation
Contact

TD SYNNEX
Corporation
Microsoft CSP / GCC
licensing, including Office
365 G3, Office 365 F3,
Microsoft Entra ID P1, Power
$48,000+
annually
800-756-1888
[email protected]
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] BI Pro, and Microsoft Teams
Rooms Pro
Watchguard Firebox M5800 with 3 Year
Total Security
$48,000+
annually
[email protected]
TD SYNNEX is included because Consultadd maintains Microsoft CSP / GCC licensing transactions through TD SYNNEX that exceed the annual obligation threshold requested by the City. 2c. Technology Partners
Consultadd Public Services maintains a technology ecosystem that supports managed IT services, cybersecurity, cloud infrastructure, endpoint management, Microsoft 365 administration, backup and disaster recovery, and network operations. The most relevant technology areas for the City of Livingston include:

Technology Area Relevant Platforms /
Capabilities
Relevance to the City of Livingston
Microsoft
Ecosystem
Microsoft 365, Entra ID, Teams,
Exchange Online, SharePoint,
OneDrive, Windows Server,
Hyper-V
Supports the City’s Microsoft 365
subscriptions, identity environment,
Windows workstations, and Hyper-V
server infrastructure
Endpoint
Management
RMM, remote support, patching,
endpoint inventory, endpoint
performance monitoring
Supports workstation management,
automated patching, remote
troubleshooting, and asset visibility
Mobile Device
Management
JAMF and Apple Business
Manager support
Supports the City’s iOS phones and iPads
currently managed through JAMF
Cybersecurity Endpoint protection, email
security, vulnerability
management, firewall monitoring,
incident response
Supports the City’s cybersecurity,
ransomware readiness, and public safety
compliance needs
Backup and
Disaster Recovery
Microsoft 365 backup, cloud
backup monitoring, restorability
validation, DR planning
Supports backup monitoring, recovery
readiness, and disaster recovery planning
Network and
Firewall Support
WatchGuard, Cisco, Juniper,
Ubiquiti, Fortinet experience,
VPN support
Supports the City’s firewall, switch,
wireless, and connectivity environment
Service
Management
Ticketing, SLA tracking,
reporting, root cause analysis,
escalation workflows
Supports weekly reporting, ticket visibility,
escalation, and continuous service
improvement
Cloud
Infrastructure
AWS and Microsoft Azure Supports optional future cloud, backup, infrastructure modernization, and business
continuity needs
Consultadd’s technology approach is flexible and practical. We can manage the City’s existing tools where they are working well, recommend improvements where there is a clear operational or security benefit, and keep any new tooling decisions transparent, cost-conscious, and aligned with the City’s priorities.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 3: Staffing
3a. Organizational Chart
Consultadd Public Services will support the City of Livingston through a layered service delivery model with named leadership, defined escalation paths, and specialized technical coverage. This structure gives the City day-to-day responsiveness while maintaining access to senior systems, network, cybersecurity, compliance, and strategic advisory resources when needed.

Level Role Proposed
Resource
Reports To Primary Function
Executive
Oversight
Executive
Sponsor
Bharat
Bhate
Consultadd
Executive
Leadership
Contract oversight, executive
relationship, issue escalation,
quarterly leadership reviews,
and long-term service alignment
Engagement
Management
Project Manager
/ Service
Delivery
Manager
Nisha K. Executive
Sponsor
Day-to-day service delivery
oversight, SLA monitoring,
reporting, ticket trend review,
transition coordination, and City
stakeholder communication
Strategic /
Security
Advisory
vCIO / Security
& Compliance
Advisor
Thomas
Wolfe
Project
Manager /
Service
Delivery
Manager
IT roadmap support,
cybersecurity governance, risk
management, disaster recovery
planning, vendor management,
budget planning, and executive
advisory
Infrastructure
Leadership
Senior Systems /
Network
Engineer
Joseph
Stokes
Project
Manager /
Service
Delivery
Manager
Server, network, Microsoft 365,
VPN, public safety technology
support, backup coordination,
and Tier 3 escalation
Field and L2
Support
Field Support /
L2 Systems
Engineer
Florian
Andrade
Senior Systems
/ Network
Engineer
Scheduled onsite visits,
endpoint support, Microsoft
365/Azure AD support,
Windows Server support,
Hyper-V support, backup
support, and documentation
Help Desk
Support
Help Desk /
Technical
Support
Specialist
Brandon
Edgar
Project
Manager /
Service
Delivery
Manager
Tier 1/Tier 2 help desk support,
ticket intake, user assistance,
Microsoft Office support,
documentation, and escalation
Cybersecurity
Risk Support
Cybersecurity
Risk Advisor
Ngum Che vCIO /
Security &
Compliance
Advisor
Cybersecurity risk assessment,
incident response planning,
backup/DR validation support,
risk register development,
security control review, and
compliance documentation
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 3b. Staff Supporting the City of Livingston
The City of Livingston will be supported by a blended team of management, field support, remote help desk, infrastructure engineering, cybersecurity, and strategic advisory resources. The team is designed to support the City’s hybrid onsite and remote service needs, including scheduled onsite support three times per week, 24/7/365 help desk coverage, public safety system support, Microsoft 365 administration, Hyper-V server management, WatchGuard firewall support, JAMF-managed iOS devices, backup monitoring, routine reporting, and strategic planning.

Role Proposed
Resource
Primary Responsibilities Availability
Executive
Sponsor /
Contract
Executive
Bharat
Bhate
Executive oversight, contract authority,
City leadership escalation, quarterly
business reviews, and long-term service
alignment
Available for City
leadership meetings and
escalations; quarterly
review minimum
Project Manager
/ Service
Delivery
Manager
Nisha K. Day-to-day service coordination, SLA
tracking, weekly reporting, monthly
service review coordination, ticket trend
analysis, issue escalation, transition
oversight, and City stakeholder
communication
Available during
business hours and for
scheduled City
management meetings
vCIO / Security
& Compliance
Advisor
Thomas
Wolfe
IT roadmap support, cybersecurity
governance, risk management,
compliance advisory, vendor
management, disaster recovery and
business continuity planning, budget
planning support, and QBR advisory
Available for monthly or
quarterly advisory
support and escalations
involving governance,
risk, security, or
strategic planning
Senior Systems /
Network
Engineer
Joseph
Stokes
Windows Server support, Microsoft 365
and Intune support, VPN support, public
safety technology support, network
administration, backup coordination,
RMM/MSP tool support, endpoint
security coordination, and Tier 3
escalation
Available during
business hours and oncall for critical
escalations
Field Support /
L2 Systems
Engineer
Florian
Andrade
Scheduled onsite visits, workstation
support, Windows Server support,
Microsoft 365/Azure AD administration,
Hyper-V support, backup support,
desktop support, user support,
documentation, and onsite coordination
Three visits per week,
three hours per visit,
with additional
availability for approved
onsite needs
Help Desk /
Technical
Support
Specialist
Brandon
Edgar
Tier 1/Tier 2 support, ticket intake, user
assistance, Microsoft Office and Office
365 support, hardware/software
troubleshooting, documentation, training
support, and escalation to senior
technical resources
24/7/365 help desk
coverage based on
agreed priority levels
Cybersecurity
Risk Advisor
Ngum Che Security gap assessment, NIST-aligned
risk review, incident response planning,
backup and DR validation support, risk
register development, vulnerability
Available for scheduled
security reviews,
incident response
support, and
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] management coordination, and security
reporting support
compliance-related
activities
All personnel assigned to Public Safety systems or CJIS-covered environments will complete the Cityrequired fingerprinting, criminal history check, CJIS Security Addendum signing, and related security requirements before access is provisioned. Consultadd will maintain unique and identifying usernames for contractor staff to support accurate access logging and accountability. 3c. Annual Staff Retention Rate
Consultadd understands that staff continuity is important to the City’s evaluation and to the success of the managed services engagement. Consistent staffing reduces transition risk, preserves institutional knowledge, improves user trust, and supports reliable service delivery across City departments.

Consultadd tracks staff continuity and uses structured retention practices to maintain stable delivery teams for public-sector clients. Our retention approach includes clear career paths, certification support, internal mentoring, cross-training, documented knowledge transfer, and escalation coverage across help desk, field support, systems administration, network support, cybersecurity, and service management functions.

Year Annual Staff Retention Rate Notes
2023 88% Company-wide / managed services delivery retention 2024 85% Company-wide / managed services delivery retention 2025 86% Company-wide / managed services delivery retention For the City of Livingston, Consultadd will maintain continuity through named management and technical accountability. Nisha K. will serve as Project Manager / Service Delivery Manager, Bharat Bhate will provide executive oversight, and the proposed technical team will be supported by documented runbooks, shared knowledge bases, and cross-trained backup resources.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Retention Area Consultadd Approach
Account continuity Nisha K. will remain responsible for service coordination, reporting, issue tracking, and City communication
Executive
continuity
Bharat Bhate will provide executive oversight and remain available for leadership escalation and quarterly business reviews
Technical
continuity
Joseph Stokes and Florian Andrade will be supported by documented runbooks, shared knowledge bases, and escalation coverage Security continuity Thomas Wolfe and Ngum Che will provide senior cybersecurity, risk, and compliance support for security-sensitive issues
Knowledge transfer Any planned staffing change will include transition notes, documentation review, and overlap where operationally feasible
Training and
development
Staff receive ongoing technical, cybersecurity, service management, and client communication training
If a staffing change becomes necessary during the contract term, Consultadd will notify the City in advance where operationally feasible, introduce the replacement resource, and complete knowledge transfer before the new resource assumes primary responsibility. 3d. Resumes of Onsite Staff
Resumes for the proposed staff are included in the proposal appendix. The resumes demonstrate direct experience in managed services, municipal/public-sector technology support, Windows Server, Microsoft 365, Hyper-V, network administration, help desk operations, cybersecurity, risk management, disaster recovery, and service delivery.

The proposed onsite and recurring support personnel include:

Resource Proposed Role Relevant Experience Summary
Joseph
Stokes
Senior Systems /
Network
Engineer
More than 15 years of system administration experience, including Windows Server, Microsoft 365, Intune, RMM/MSP tools,
NinjaOne, Wazuh security, Datto backup, Barracuda spam filtering, VPN support, MDM, ticketing platforms, and municipal public safety technology support. His City of San Antonio experience included NetMotion VPN support for police/fire vehicles, CAD software support, vehicle camera support, and wireless/network infrastructure support for city buildings.

Florian
Andrade
Field Support /
L2 Systems
Engineer
MSP and systems engineering experience across Microsoft 365, Azure Active Directory, Windows Server, Hyper-V, ConnectWise, ITGlue, Kaseya, backups, disaster recovery, Active Directory, Group Policy, endpoint support, asset tracking, procurement policies, and desk-side support. His experience includes California-based MSP work and multi-client support environments.

Brandon
Edgar
Help Desk /
Technical
Support
Specialist
Tier I/Tier II support, service request prioritization, Microsoft Office support, documentation, technical records, Active Directory, DHCP, DNS, NTP, Cisco/Brocade switch configuration, VLAN support, cybersecurity practices, and technical training. Holds ITIL Foundation v4, CompTIA A+, Network+, Security+, and DoD 8140 IAT Level II compliance.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Thomas
Wolfe
vCIO / Security
& Compliance
Advisor
Senior IT management and cybersecurity risk leader with outsourced CIO experience, IT strategy, cybersecurity governance, regulatory compliance, disaster recovery, business continuity, vendor management, IT financial modeling, and government technology project experience. Holds CISSP, CISA, Security+ CE, Network+ CE, MCP, and MCTS credentials.

Ngum
Che
Cybersecurity
Risk Advisor
Cybersecurity and GRC leader with experience in NIST CSF, NIST 800-53, NIST 800-171, FedRAMP, FISMA, HIPAA, ISO 27001, SOC 2, PCI DSS, CMMC, incident response planning, disaster recovery/business continuity planning, risk registers, vulnerability management, and executive risk reporting. Holds CISA, AWS Solutions Architect Associate, Security+, Splunk Core Certified User, and Splunk Certified Power User credentials.

No Consultadd personnel will access CJIS-covered systems until all City-required background checks, fingerprinting, CJIS Security Addendum signing, and related security requirements are completed. 3e. Help Desk Staff Job Requirements
Help desk staff assigned to the City of Livingston will meet the following minimum requirements:

1. Hands-on IT support experience in a managed services, public-sector, or enterprise environment

2. Working knowledge of Windows workstation support, Microsoft 365, Outlook, Teams, OneDrive, SharePoint, and common end-user applications

3. Ability to troubleshoot password, MFA, remote access, VPN, printer, peripheral, and workstation issues

4. Familiarity with ticketing systems, ticket documentation, priority assignment, SLA tracking, and escalation workflows

5. Clear communication skills for working with users across City departments and technical skill levels

6. Ability to follow documented procedures, security policies, and change control expectations

7. Familiarity with mobile device support, with JAMF and Apple Business Manager experience preferred for this engagement

8. For any staff assigned to Public Safety systems, ability to complete required fingerprinting, criminal history checks, CJIS Security Addendum signing, and CJIS-related training before access is granted
3f. Staff Development and Training Programs
Consultadd invests in ongoing staff development to maintain service quality, technical currency, and security awareness across client engagements. Training and development activities include:

1. Technical certification support for Microsoft, CompTIA, ITIL, cybersecurity, cloud, and infrastructure disciplines

2. Security awareness training for all staff, with CJIS-specific training for personnel assigned to applicable public safety environments

3. Internal knowledge-sharing sessions on emerging security threats, infrastructure practices, Microsoft 365 administration, endpoint management, and service delivery lessons learned

4. Vendor platform training for tools and environments relevant to client support, including Microsoft 365, endpoint management, firewall, backup, and remote monitoring platforms City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected]

5. Service management training covering ticket documentation, escalation, SLA tracking, customer communication, and problem management

6. Cross-training across help desk, field support, systems administration, network support, and cybersecurity functions to reduce single-person dependency and improve coverage continuity City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 4: Security
4a. Company Security Certifications
Consultadd Public Services maintains a security-conscious delivery model supported by organizational security controls, trained personnel, documented access practices, and experience supporting compliancesensitive public-sector environments. Current company-level certifications and credentials relevant to the City of Livingston are summarized below.

Certification /
Credential
Current
Status
Year
Originally
Obtained
Relevance to the City of Livingston
SOC 2 Type II Active 2024 Supports third-party validated controls related to secure service delivery, availability,
confidentiality, and operational discipline
ISO/IEC 27001:2022 Active 2025 Supports Consultadd’s information security management practices, including policy, risk
management, access control, and continuous
improvement
GSA Multiple Award
Schedule (MAS)
Active 2025 Demonstrates Consultadd’s approved federal
IT services schedule for information
technology professional services, cloudrelated IT professional services, and temporary staffing
Microsoft Cloud
Solution Provider /
Indirect Reseller
Active 2025 Relevant to the City’s Microsoft 365, Entra ID, Windows Server, and Microsoft
ecosystem support needs
AWS Advanced Tier
Partner
Active 2025 Relevant to optional cloud, backup,
modernization, and disaster recovery advisory
support
CMMC Readiness /
Cybersecurity
Program Alignment
Active
internal
readiness
2024 Relevant to Consultadd’s cybersecurity
maturity, access control practices, and support
for compliance-sensitive environments
Consultadd will provide supporting documentation for applicable company-level certifications upon request or as part of contract execution.
4b. Staff Security Certifications
Consultadd’s proposed team includes senior security, compliance, systems, network, and help desk personnel with certifications and experience relevant to the City’s environment. The team has been selected to support the City’s Windows, Microsoft 365, Hyper-V, network, backup, endpoint, and public safety support needs.

Proposed
Resource
Proposed Role Relevant Security / Technical Credentials Thomas
Wolfe
vCIO / Security &
Compliance Advisor
CISSP, CISA, Security+ CE, Network+ CE, Microsoft
Certified Professional, Microsoft Certified Technology
Specialist
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Ngum Che Cybersecurity Risk
Advisor
CISA, AWS Certified Solutions Architect Associate, CompTIA Security+, Splunk Core Certified User, Splunk Certified Power User
Joseph
Stokes
Senior Systems /
Network Engineer
A+ Certification, Network+ Certification, security awareness training, current Security+ / CCNA coursework
Brandon
Edgar
Help Desk /
Technical Support
Specialist
ITIL Foundation v4, CompTIA A+ CE, CompTIA Network+
CE, CompTIA Security+ CE, DoD 8140 IAT Level II
compliant
Florian
Andrade
Field Support / L2
Systems Engineer
Systems engineering experience across Microsoft 365, Azure Active Directory, Windows Server, Hyper-V, ConnectWise, ITGlue, Kaseya, backups, disaster recovery, and endpoint support
All staff assigned to Public Safety systems, CLETS-connected systems, or CJIS-covered environments will complete the City-required fingerprinting, criminal history check, CJIS Security Addendum signing, and related CJIS security requirements before access is provisioned. 4c. Background Checks
Consultadd conducts background checks for personnel assigned to client environments. Standard checks include identity verification, criminal background review, employment verification, reference validation where applicable, and review of role-specific access requirements.

For the City of Livingston, Consultadd will follow the City’s Public Safety and CJIS access requirements before any applicable system access is granted. This includes:

1. Criminal history check and fingerprinting conducted through the City of Livingston Police Department for all applicable personnel
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected]

2. CJIS Security Addendum signing by personnel with direct or indirect access to CJIS-covered systems

3. Completion of required CJIS-related training and security awareness requirements before system access is provisioned

4. Use of unique, individually attributable usernames for all contractor personnel

5. Access logging and review to support accountability and auditability

6. Immediate access removal upon staff departure, reassignment, or contract termination Consultadd understands that CJIS requirements apply to all personnel who may have direct or indirect access to CJIS-covered systems, whether onsite or remote. Consultadd will not use an escorted remote access model as a substitute for CJIS compliance.
4d. Security Policies Regarding Client Access
Consultadd’s client access policies are designed to protect City systems, reduce unauthorized access risk, and support accountability across the managed services environment.

Security Practice Consultadd Approach
Least-Privilege
Access
Staff receive only the access needed to perform assigned responsibilities Unique User
Accounts
Shared contractor accounts are not permitted; each staff member uses a unique username
Multi-Factor
Authentication
MFA is required for remote access and administrative access where supported CJIS-Covered
System Access
Access is limited to personnel who have completed City-required fingerprinting, background checks, CJIS Addendum signing, and related requirements
Remote Access Remote support is performed through secure, approved access methods with logging and session accountability
Offshore Access
Restriction
No offshore or non-cleared personnel will access CJIS-covered systems Access Review Contractor access will be reviewed periodically and adjusted when roles change
Access Revocation Access is removed promptly when personnel leave the engagement or no longer require access
Confidentiality Staff are required to follow confidentiality, data handling, and client access policies
For CJIS-covered systems, Consultadd will use a U.S.-based, City-cleared support model. Any global or offshore delivery resources, if used for non-CJIS support activities, will be restricted from CJIS-covered systems and will operate only under City-approved access boundaries. 4e. Strategy for Securing Client Data
Consultadd’s data security strategy combines access control, endpoint security, monitoring, patching, backup validation, incident response, user awareness, and documentation. The goal is to support the City’s operational reliability while reducing cybersecurity risk across City Hall, Police Department, Public Works, WWTP, mobile users, and other supported locations.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] i. Staying Informed Regarding Security Alerts and Events Consultadd tracks relevant security alerts and advisories through trusted public and vendor sources, including CISA alerts, Microsoft security advisories, firewall and endpoint security vendor notifications, cloud platform advisories, and threat intelligence from deployed security tools. Security alerts are reviewed for applicability to the City’s environment and prioritized based on severity, exploitability, system exposure, and operational impact.
ii. Notifying and Managing Security Events
Security events are managed through a severity-based incident response process:

Phase Action
Identify Detect event through monitoring tools, vendor alerts, firewall logs, endpoint alerts, or user reports
Triage Classify severity, affected systems, business impact, and whether Public Safety or CJIScovered systems may be involved Notify Notify the City’s designated point of contact based on severity; immediately escalate critical or CJIS-relevant events
Contain Isolate affected systems, disable compromised accounts, block malicious traffic, or restrict access as appropriate
Remediate Remove malicious activity, patch vulnerabilities, reset credentials, restore configurations, and coordinate vendor support
Recover Validate system functionality, restore services, and confirm backup integrity where recovery is required
Report Provide incident summary, timeline, impact, root cause, remediation steps, and recommended risk reduction actions
If an event involves Public Safety or CJIS-covered systems, Consultadd will follow the City’s escalation requirements and applicable CJIS incident handling expectations. iii. Mobile Device Security
The City’s Q&A confirms that the City uses JAMF to manage City-owned iOS devices enrolled through Apple Business Manager. Consultadd will support the existing mobile device management model by assisting with device enrollment, blueprint assignment, profile management, app support, update coordination, lost-device response, and remote wipe coordination where authorized by the City.

Consultadd will support mobile security practices including:

1. JAMF enrollment and device assignment support

2. Configuration profile review and update coordination

3. App management and update support

4. Device inventory validation

5. Lost or stolen device response support

6. Remote wipe coordination where approved

7. User support for MFA, Microsoft 365, and mobile productivity applications iv. Ensuring Security Best Practices Are Followed
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Consultadd will reinforce security best practices through a combination of process, reporting, technical controls, and management review.

Security Area Practice
Patch Management Routine patching for servers and workstations, with critical patch prioritization based on severity
Endpoint Security Endpoint protection monitoring, alert triage, and remediation coordination Identity and Access User lifecycle management, MFA support, least-privilege access, and periodic access review
Backup Security Daily backup monitoring and periodic restorability validation Firewall / Network
Security
Firewall rule review, VPN support, security log review, and vendor coordination
Email Security Coordination with the City’s email security platform and Microsoft 365 controls
User Awareness Security awareness guidance for phishing, password hygiene, MFA, and incident reporting
Reporting Security, patching, backup, and incident activity included in weekly and monthly reporting
Continuous
Improvement
Recurring reviews to identify recurring risks, aging assets, unsupported systems, and improvement opportunities
Consultadd’s security approach is practical and risk-based. We will manage the City’s existing tools where they are operating effectively, recommend improvements where the benefits are clear, and keep all security changes transparent to City leadership.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 5: Services
5a. Desktop Support (Hardware and Software)
• Diagnosis and troubleshooting for hardware failures across 89 workstations (65 desktops, 24 laptops) at six City locations
• Coordination of warranty repairs and hardware replacement procurement • Windows OS support, updates, and configuration management • Microsoft 365 application support: Outlook, Teams, Word, Excel, SharePoint, OneDrive, and related services
• User account management, password resets, and profile maintenance • Peripheral setup and support: printers, monitors, docking stations, scanners, and peripherals • Software installation, updates, and license tracking
• Live Scan Fingerprinting workstation support coordination • JAMF-managed iOS device support (58 phones, 10 iPads; Apple Business Manager enrolled) 5b. Network Hardware and Operating Systems
• WatchGuard firewall management at City Hall/Police Department, WWTP (7160 Gallo Rd), and Well 17
• Cisco, Juniper, and Ubiquiti switch and access point management across all City locations • Network connectivity monitoring and troubleshooting
• VLAN management and network segmentation oversight
• Firmware and security patch management for network devices • Bandwidth and connectivity performance monitoring
• Remote access infrastructure management: Always-on VPN for Police MDTs, Remote PC for general staff remote access
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] • Coordination of ISP and telecom vendor issues
5c. Remote Access Support
• Support for Always-on VPN used by Police Mobile Data Terminals • Support for Remote PC remote access for general City staff working off-site • VPN connectivity troubleshooting and credential management • MFA support for Microsoft Authenticator and hardware authenticators deployed by the City • Remote session troubleshooting for any City staff with connectivity issues 5d. Work Order and Ticket System
Consultadd manages all client support requests through a Professional Services Automation (PSA) platform configured for the City's environment:
• Ticket intake via phone, email, and portal (channels confirmed during onboarding based on City preference)
• Automatic ticket creation with timestamp, priority assignment, and technician assignment • Ticket categorization by service area: hardware, software, network, security, M365, mobile, infrastructure, and project
• SLA tracking from creation through resolution with automated alerts for approaching or missed targets
• Status updates communicated to requesting user at key milestones • Resolution notes and knowledge base documentation captured per ticket • Weekly ticket summary included in routine reporting to the City per RFP requirement 5e. Escalation System for Chronic or Advanced Problems
Tier Primary Resource Handles Escalation Trigger
Tier 1 Help Desk
Technician
Password resets, common software
issues, basic hardware, user guidance,
connectivity troubleshooting
Unable to resolve within
defined time; issue
requires elevated access
Tier 2 Senior Help Desk /
Field Tech
Advanced desktop issues, JAMF/MDM,
M365 admin, network connectivity,
VoIP, onsite hardware
Requires specialized
system knowledge or
vendor coordination
Tier 3 Senior Systems
Engineer
Server, Hyper-V, WatchGuard, security
events, advanced network, backup
failures, root cause analysis
Infrastructure-level issue
or security event
Tier 4 Security and
Compliance Lead /
Vendor Engagement
CJIS incidents, ransomware, advanced
cybersecurity, critical system failures,
vendor escalation
Security event, critical
system down, CJISrelevant incident
The Project Manager (Nisha K.) is notified of all active Tier 3 and Tier 4 escalations and provides status updates to City leadership during active incidents.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 5f. Hours of Operation and Guaranteed Call Response Time Consultadd Public Services provides 24/7/365 help desk support for the City of Livingston. Support is available through phone, email, remote support tools, and ticketing workflows. The proposed service model includes business-hours support, after-hours remote support, and emergency after-hours onsite response for P1/Critical incidents involving covered systems.

The following response targets are proposed for the City of Livingston. These targets will be incorporated into the final service agreement and reported through weekly and monthly service reporting.

Priority Description and Examples Guaranteed
Initial
Response
Time
Target Resolution /
Restoration Approach
P1 /
Critical
City-wide outage, Police Department
system outage, active cybersecurity
incident, ransomware event, major
server failure, City Hall/Police network
outage, or failure affecting critical City
operations
15 minutes,
24/7/365
Immediate escalation to senior
engineering and security
resources; continuous work
until service is restored or a
workaround is approved
P2 /
High
Multiple users impacted, major
application unavailable, firewall/VPN
issue affecting operations, failed backup
requiring urgent review, Police
workstation or MDT issue affecting
field operations
1 hour,
24/7/365
Same-day remediation target
where feasible; escalation to
senior engineer if not resolved
within the initial
troubleshooting window
P3 /
Normal
Single-user workstation issue,
Microsoft 365 issue, printer/peripheral
issue, password/MFA support, standard
remote access issue, routine software
troubleshooting
4 business
hours
Next business day target for
resolution or workaround,
depending on parts/vendor
dependency
P4 /
Low
General questions, scheduled changes,
user guidance, documentation requests,
non-urgent configuration changes
Next business
day
Within 3 business days or as
scheduled with the City
For critical issues that cannot be resolved remotely, Consultadd will dispatch onsite support for covered systems as part of the base managed services model. Non-critical after-hours onsite work requested by the City will be handled under the optional fee schedule.
5g. Help Desk Statistics
Consultadd tracks help desk performance across client engagements and uses these metrics to manage service quality, recurring issues, staffing needs, and user satisfaction. For the City of Livingston, Consultadd will report help desk performance weekly and monthly, including ticket volume, response time, resolution time, SLA compliance, recurring issues, and issue categories.

A recent managed IT and cybersecurity engagement for Marin Housing Authority demonstrates Consultadd’s service performance in a public-sector environment with help desk, endpoint, Microsoft City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 365, backup, cybersecurity, onsite, and remote support needs. In that engagement, Consultadd handled 280 IT support tickets in Q2, achieved an average first response time of 18 minutes, maintained 94.7% SLA first response compliance, maintained 93.0% SLA resolution compliance, supported zero critical P1 incidents, and resolved 97% of tickets each month.

For Livingston, the following metrics will be tracked and reported:

Metric Reporting Purpose
Total tickets opened
and closed
Shows service volume and support demand
Average initial
response time
Shows responsiveness by priority level
Average resolution
time
Shows effectiveness and workload complexity
SLA compliance by
priority
Shows whether support commitments are being met
Ticket category
breakdown
Identifies common issue types such as Microsoft 365, endpoint, network, mobile, backup, or application support
Repeat or recurring
issues
Supports root cause analysis and problem management
First-contact resolution
rate
Shows how many issues are resolved without escalation
After-hours incidents Tracks critical support demand outside normal business hours Backup and patch
exceptions
Provides visibility into operational risk areas
User and department
trends
Helps identify departments needing additional support, training, or technology improvements
These statistics will be included in the City’s weekly operations reports and monthly service reviews. 5h. Availability of Key Staff During Normal Business Hours Consultadd’s service model gives the City access to day-to-day support resources and senior technical escalation during normal business hours.

Role Availability During Normal
Business Hours
Support Focus
Project Manager /
Service Delivery
Manager
Available during business hours for
service coordination, reporting, and
escalation
Service governance, SLA review,
City communication, issue tracking
Field Support / L2
Systems Engineer
Scheduled onsite three times per
week, three hours per visit; available
for approved additional onsite needs
Endpoint support, hardware setup,
user assistance, documentation, onsite
troubleshooting
Help Desk /
Technical Support
Specialist
Available through help desk channels Ticket intake, Microsoft 365 support, password/MFA support, user
assistance, remote troubleshooting
Senior Systems /
Network Engineer
Available for escalations and
scheduled infrastructure work
Windows Server, Hyper-V, network
support, VPN, backups, Microsoft
365, public safety technology support
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] vCIO / Security &
Compliance Advisor
Available for scheduled advisory
sessions and escalations involving
security, risk, governance, or
strategic planning
Roadmap support, risk review,
DR/BCP, cybersecurity governance
Cybersecurity Risk
Advisor
Available for scheduled security
reviews and incident support
Incident response planning, risk
register, security review, backup/DR
validation support
Although the RFP references Terminal Server expertise, the City’s Q&A confirms that the City does not currently use Microsoft Terminal Server. Consultadd’s assigned staff have experience supporting remote access, VPN, Microsoft 365, Windows Server, Hyper-V, and endpoint environments, which align to the City’s current support needs.
5i. After-Hours Support
Consultadd provides after-hours support as part of the managed services model. The after-hours model is designed to prioritize urgent events that affect City operations, public safety systems, cybersecurity, server availability, network access, backup integrity, or multi-user service availability.

After-hours support includes:

1. 24/7/365 help desk access for urgent issues

2. 15-minute guaranteed initial response for P1/Critical incidents

3. Senior Systems / Network Engineer escalation for infrastructure issues

4. Security escalation for suspected cybersecurity events, ransomware, unauthorized access, or CJIS-relevant concerns

5. Emergency after-hours onsite support for P1/Critical incidents involving covered systems where remote resolution is not sufficient

6. Next-business-day handling for non-critical issues unless the City requests after-hours onsite support under the optional fee schedule
After-Hours Scenario Included in Base
Monthly Fee?
Notes
P1/Critical remote response Yes Included 24/7/365
P1/Critical onsite response for
covered systems
Yes Included when onsite response is
necessary to restore or stabilize covered
systems
P2/High remote response Yes Included 24/7/365 based on priority Non-critical after-hours onsite
work requested by the City
No Billed under optional fee schedule
Scheduled after-hours
maintenance
Yes, when related to
covered routine support
Major projects or migrations may be
scoped separately
Council meeting A/V operation No Priced separately as optional A/V support
This structure gives the City emergency coverage while keeping non-critical after-hours work and optional meeting support transparent.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 5j. Penalties and Accountability for Missed Response Times Consultadd supports performance accountability through SLA tracking, reporting, root cause review, and corrective action. If guaranteed response times are not met, Consultadd will document the miss, identify the cause, report it in the monthly service review, and implement a corrective action plan.

Consultadd’s proposed accountability model includes:

SLA Issue Corrective Action
Single missed response target Documented in monthly report with cause and corrective action
Repeated missed response targets in the
same category
Root cause review and escalation to Project Manager /
Service Delivery Manager
Recurring service-level misses across
multiple categories
Executive Sponsor review and written service
improvement plan
City-impacting SLA failure Formal service review with City leadership and agreed remediation actions
Consultadd is open to discussing mutually agreed service credits or other service-level remedies in the final services agreement. At a minimum, every missed guaranteed response target will be tracked, reviewed, and addressed through documented corrective action. 5k. On-Site Support Representative
Based on the Q&A clarification from the City, Consultadd will provide on-site support on a schedule of three visits per week, three hours per visit. On-site activities include:
• Hardware setup, installation, and physical replacement • Network cabling, device installation, and physical infrastructure tasks • In-person end-user support for issues requiring physical presence • Workstation imaging, refresh, and deployment
• Onsite coordination for scheduled maintenance windows • Council meeting A/V support if the optional scope is awarded • Physical walkthrough of infrastructure, open issues, and change documentation during each visit Onsite visits will be scheduled in coordination with City staff to maximize availability for open work and planned activities. A weekly schedule will be shared with the Project Manager and City point of contact. 5l. Advanced Help Desk Skill Sets
• Hyper-V virtualization management (4 physical servers, 8 VMs at City Hall and Police Department) • Microsoft 365 administration including Exchange Online, Teams, SharePoint, OneDrive, and Entra ID
• WatchGuard firewall management and VPN configuration
• Microsoft Entra ID (formerly Azure AD) and identity lifecycle management • JAMF MDM for iOS device management (Apple Business Manager enrolled fleet) • Always-on VPN and Remote PC troubleshooting and administration • VoIP system support and troubleshooting
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] • Cisco, Juniper, and Ubiquiti network device administration • Inky spam filtering coordination and alert management • Backup and DR management for cloud-based backup environments • CJIS-compliant support practices for Police Department and public safety systems 5m. Client Training
Consultadd provides end-user orientation and training support for City staff. Activities may include:
• Onboarding orientation for new City employees on common support procedures and help desk intake channels
• End-user guidance on Microsoft 365 features relevant to daily City operations (Outlook, Teams, OneDrive, SharePoint)
• Security awareness guidance covering phishing recognition, password hygiene, and incident reporting • Coordination with third-party training vendors for formal application training where needed Training recommendations will be tailored based on common support patterns identified during the first 90 days.
5n. Backup Support
The City currently maintains daily backups to cloud with approximately 2.3TB of backup data. A restorability test has been completed within the past year. Consultadd will manage and monitor the City's backup operations:
• Daily monitoring of backup job completion status
• Immediate alerting for backup failures or incomplete jobs • Coordination of periodic restorability testing on a defined cadence to validate recovery capability • Documentation of backup coverage, retention periods, and recovery procedures • Assessment during onboarding to confirm backup scope aligns with City recovery expectations • Recommendations for backup enhancements (e.g., extended retention, additional copy, monitoring improvements) presented as optional services with defined costs 5o. Disaster Recovery Support
• Documentation of current recovery procedures for critical systems at City Hall, Police Department, and WWTP
• Development and maintenance of a DR runbook covering recovery priority order, recovery steps, and emergency contact information
• Coordination of periodic DR testing to validate recovery time and recovery point expectations • Post-incident review and DR plan updates following any disruption • Integration of backup validation results into the overall DR readiness picture Specific recovery time and recovery point objectives will be validated during discovery based on the City's operational priorities and existing backup infrastructure.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 5p. Major Software Upgrades
• Upgrade plans reviewed with City stakeholders before any deployment begins • Testing conducted in a controlled or off-hours window where operationally feasible • Scheduled maintenance windows communicated to City staff with advance notice • Rollback plan documented before any major upgrade is applied • Post-upgrade validation and monitoring for a defined stabilization period Routine updates and security patches are included in the base monthly fee. Major infrastructure upgrades such as server OS migrations or new application deployments are proposed separately under optional fees with a defined scope, timeline, and cost before any work begins. 5q. Patch Management
• Critical and high-severity security patches: deployed as quickly as feasible following vendor release, testing, and City notification
• Monthly patch cycle: all standard OS and application patches deployed on a defined monthly schedule
• Server patching: conducted during defined maintenance windows to minimize operational impact • Workstation patching: deployed during off-hours or low-activity periods using RMM automation • JAMF-managed iOS devices: managed separately through Apple Business Manager and JAMF update policies
• Patch reporting: patch compliance status for servers and workstations included in weekly reports Patch management covers the City's Hyper-V environment (4 physical servers, 8 VMs), 89 Windows workstations, applicable network devices, and Microsoft 365-connected services.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] 5r. Network Downtime Scheduling and Communication
• Minimum 48-hour advance notice for planned maintenance windows requiring network downtime • Off-hours scheduling preferred for any maintenance that impacts user connectivity • Pre-maintenance notifications to City management and impacted staff via email and phone • Defined start and estimated completion times communicated before work begins • Status confirmation to City staff at maintenance completion • Emergency network downtime communicated immediately with an estimated restoration timeline City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 6: Monitoring
6a. Monitoring Tools and Strategies
Consultadd deploys a Remote Monitoring and Management (RMM) platform as the foundation of its 24/7/365 monitoring capability. The RMM platform covers all City-managed infrastructure including servers, workstations, network devices, firewalls, and backup jobs.

Monitoring
Category
What Is Monitored Alert and Response
Server and VM
Health
CPU utilization, memory, disk capacity,
uptime, critical services, and event logs for all
Hyper-V hosts (3 physical) and VMs (8) at
City Hall and Police Department
Alert to on-call engineer;
immediate investigation for
critical thresholds
Network and
Firewall
WatchGuard firewalls at 3 City locations;
switches and access points across all six City
sites
Alert to on-call technician;
escalation for persistent
connectivity loss
Endpoint Health Online/offline status, disk health, OS events for 89 Windows workstations
Flagged in ticket queue for
next available technician or
immediate response based on
severity
Backup Jobs Daily backup completion status for City's
cloud backup environment (approximately

2.3TB)
Immediate alert and
investigation for failed or
incomplete backup jobs
Security Events Firewall logs, endpoint protection alerts, failed login attempts, and policy violations
Triage and response per
incident severity; CJISrelevant events handled per
CJIS Security Policy
requirements
Application and
Services
Key server services and application
availability
Alert and automated restart or
escalation as applicable per
service type
6b. Communicating Monitoring Results to the City
• Weekly reports: monitoring activity summary, alerts triggered, actions taken, open issues, patch status, and backup status per RFP requirement
• Real-time alerts: critical events including system down, backup failure, and security events are communicated to the City's designated point of contact immediately upon detection • Monthly operational review: summary of monitoring trends, recurring issues, and infrastructure health presented to City management
• On-demand reporting: City management may request monitoring status summaries at any time City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 7: Management
7a. Reporting on System Status, User Needs, and Change Recommendations Report Frequency Audience Contents
Weekly Operations
Report
Weekly City IT point of contact
/ City Manager
System monitoring summary, help
desk activity, patches applied,
backup status, security events,
open issues, and planned activities
Monthly Service
Review
Monthly City management SLA performance, ticket volume
and category trends, recurring
issues, infrastructure health,
upcoming work, and risk items
Quarterly Business
Review
Quarterly City leadership / City
Manager
Strategic technology review, 12-
month roadmap progress, lifecycle
alerts, budget considerations, and
security posture summary
Incident Report As needed City point of contact
and leadership
Root cause, impact timeline,
remediation steps, and prevention
recommendations
7b. Changes in Technicians Assigned to the Contract
Consultadd recognizes that staffing continuity is a scored criterion in the City's evaluation. Our technician change process:

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] • Minimum 30 days advance written notice to the City for any planned technician change where operationally feasible
• Structured knowledge transfer period during which incoming and departing staff overlap on the engagement
• Introduction of new staff to City points of contact before they assume primary responsibilities • Full documentation of current-state infrastructure, open issues, and institutional knowledge before any transition
• Project Manager (Nisha K.) maintains continuity of service oversight and City relationship management through any personnel transitions
7c. IT Strategic Planning
Consultadd provides IT strategic planning as a core element of the managed services engagement:
• 12-month technology roadmap developed during initial onboarding and updated annually at the yearend quarterly business review • Hardware and software lifecycle tracking with refresh recommendations and budget estimates • Technology assessments identifying gaps, risks, and modernization opportunities aligned to the City's budget and operational priorities
• Proactive identification of end-of-life systems, unsupported software, and compliance risks before they become operational issues
• Vendor and contract management support covering license renewals, support contract tracking, and purchasing coordination
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 8: Documentation, Record Keeping and Reporting
8a. Routine Reporting Procedures
Consultadd's reporting model is built to give City leadership the right information at the right frequency.

All reports are delivered on a defined schedule and archived in the engagement knowledge base:
• Weekly report: system monitoring results, help desk activity, patches applied, backup job status, security events, and open issues per RFP requirement
• Monthly report: SLA performance, ticket volume and category breakdown, recurring issues, infrastructure health, completed project work, and planned activities • Quarterly business review: strategic technology discussion, roadmap progress, lifecycle register updates, budget considerations, and risk summary
Reports are delivered in a format agreed upon with the City, typically PDF or document attachment, and stored in the City's shared knowledge base directory.
8b. System Documentation and Change Records
Consultadd maintains a centralized knowledge base for all City-related documentation. Contents include:
• Network diagrams covering all City locations (City Hall, Police Department, Public Works, WWTP, Well 17, and the sixth location validated during onboarding) • Server infrastructure documentation: Hyper-V host and VM inventory, roles, storage configuration, and hardware specifications for all physical and virtual servers • Application inventory: business applications, versions, license information, support contacts, and system dependencies
• Asset inventory: 89 workstations, 4 physical servers, 8 VMs, 68 iOS devices, and all network devices • Firewall and network configuration documentation: WatchGuard rules, VPN settings, switch configurations, and access point profiles
• Change log: all configuration changes, patching, hardware replacements, and software updates documented with date, technician, and rationale
• Vendor and ISP contact matrix: SCADA vendor, printer vendor, camera and access control vendors, and all ISP and service contacts
• Runbooks: step-by-step procedures for common maintenance tasks, incident response, backup restoration, and emergency escalation
• CJIS access and compliance documentation maintained separately per CJIS Security Policy requirements
All documentation is accessible to City management upon request and updated on a continuous basis as changes occur.
8c. End-of-Contract Transition Documentation
At contract expiration or termination, Consultadd delivers a complete transition documentation package to support continuity under a successor provider or in-house management:
• Current-state network diagrams for all City locations City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] • Server and infrastructure configuration documentation • Complete current asset inventory
• All system credentials, securely transferred through an agreed-upon handoff process • Application inventory, licenses, vendor contacts, and renewal dates • Outstanding open tickets and their current status
• Active project documentation and status
• Runbooks and operational procedures developed during the engagement • Backup and DR documentation including recovery procedures and current backup configuration • CJIS compliance documentation and access records as applicable This documentation package will be finalized and delivered within 30 days of contract termination notice.

Consultadd will support a reasonable handoff period to protect the City's operational continuity during the transition.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 9: Fees
9a. Fee Structure
Consultadd Public Services proposes a fixed monthly pricing model for the City of Livingston. This structure is designed to provide the City with predictable cost coverage for comprehensive managed IT services while keeping optional services, major infrastructure projects, and future scope changes clearly separated.

Our pricing reflects the City’s current environment, including 89 Windows workstations, 4 physical servers, 8 virtual servers, 68 City-owned iOS devices managed through JAMF, 3 WatchGuard firewalls, Microsoft 365 administration, daily cloud backup monitoring, 24/7/365 help desk coverage, and scheduled onsite support three times per week.
i. Service Initiation Fee
Consultadd proposes a one-time service initiation fee of $7,500. This fee covers the initial onboarding and transition work required to assume support responsibility for the City’s IT environment.

The service initiation fee includes:

1. Project kickoff and transition coordination with City stakeholders

2. Asset discovery and validation across City locations

3. RMM monitoring platform deployment and configuration

4. PSA/ticketing workflow setup for City-specific service categories, priorities, and reporting

5. Initial server, workstation, network, firewall, and Microsoft 365 environment review

6. Backup environment validation and baseline reporting

7. CJIS background check and fingerprinting process initiation for applicable staff

8. Documentation baseline, including asset inventory, critical systems map, and initial risk register

9. Knowledge transfer coordination with the City and existing providers, where available One-Time Service Initiation Fee: $7,500
ii. Ongoing Monthly Fee
Based on the City’s current support requirements, Consultadd proposes a fixed monthly fee of $10,000 per month for comprehensive managed IT services.

This monthly fee includes the following core services:

Service Category Included in
Base Monthly
Fee
Coverage Notes
24/7/365 Help Desk
Support Yes Unlimited covered tickets; business-hours and afterhours response based on agreed priority levels Onsite Support Yes Three visits per week, three hours per visit; approximately 9 hours per week
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Emergency AfterHours Remote Support Yes Included for P1/Critical incidents involving covered systems
Emergency AfterHours Onsite Support Yes Included for P1/Critical incidents where onsite response is required for covered systems
Endpoint Management Yes Support for 89 Windows workstations, including 65 desktops and 24 laptops
Server Management Yes Support for 4 physical servers and 8 virtual servers Hyper-V Support Yes Management and support of the City’s Hyper-V environment
Network Management
Yes
WatchGuard firewall support, switch/access point
support, connectivity troubleshooting, and vendor
coordination
Microsoft 365
Administration Yes
Support for Microsoft 365 Business Standard, Business
Basic, Entra ID P1, and Teams Audio Conferencing
subscriptions
JAMF / iOS MDM
Support Yes Support for 58 iOS phones and 10 iPads enrolled through Apple Business Manager and JAMF Patch Management Yes Routine server and workstation patching, critical security patch coordination, and patch reporting
Backup Monitoring Yes Monitoring of the City’s existing daily cloud backup environment, currently approximately 2.3TB
Disaster Recovery
Support Yes DR runbook support, recovery coordination, and periodic restorability validation support Cybersecurity Support
Yes
Security monitoring, endpoint protection coordination,
firewall log review, access control support, and incident response
CJIS Compliance
Coordination Yes
CJIS access coordination, staff clearance tracking,
unique user access controls, and compliance-aware
support for Public Safety systems
VoIP Support Yes General VoIP troubleshooting and vendor coordination Vendor Coordination Yes Coordination with SCADA, printer, camera, access control, ISP, and other third-party technology vendors
Weekly Reporting Yes Monitoring, help desk, patching, backup, security, and open-issue reporting
Monthly Service
Review Yes SLA trends, ticket trends, recurring issues, risk items, and upcoming work Quarterly Business
Review Yes Strategic planning, lifecycle management, roadmap updates, and budget planning support City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Monthly Managed IT Services Fee: $10,000 per month
iii. Three-Year Pricing Summary
Pricing Item Amount
One-Time Service Initiation Fee $7,500
Monthly Managed IT Services Fee $10,000/month
Annual Managed IT Services Fee $120,000/year
Three-Year Managed IT Services Fee $360,000
Total Three-Year Cost Including Initiation Fee $367,500 9b. Environmental Change Pricing
Monthly fees may be adjusted if the City’s environment changes materially during the contract term.

Consultadd proposes the following unit pricing for service-adjusting events:

Environmental Change Pricing Approach
Additional workstation or laptop $35 per device/month
Additional physical or virtual server $175 per server/month Additional supported user $25 per user/month, excluding software license costs Additional mobile device under JAMF
support
$15 per device/month
Additional firewall $125 per firewall/month
Additional City location Scoped separately based on location, network footprint, onsite needs, and travel requirements
Removal of supported workstation, server,
user, mobile device, or firewall
Monthly fee reduced at the next billing cycle using
the same unit pricing logic
Significant scope reduction or expansion Contract amendment or written change order Software licenses, hardware purchases, third-party subscriptions, telecom charges, vendor support contracts, manufacturer warranties, and product renewal costs are not included in the monthly managed services fee unless expressly stated in the final agreement. These costs may be passed through to the City at actual cost or handled directly by the City, depending on the City’s preference.

The fixed monthly fee is intended to cover routine maintenance, support, monitoring, reporting, and operational IT services. Major or large-scale infrastructure projects, including full server migrations, new system deployments, major network redesigns, or application-level modernization projects, may be proposed separately under optional or project-based pricing with City approval before work begins.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 10: Optional Fees
The following services are not included in the base monthly managed IT services fee unless specifically authorized by the City in writing. Consultadd will not begin optional work without prior written approval from the City.

Optional Service or Work
Item
Description Pricing
Council Meeting A/V Support Operation of existing Council Chambers A/V equipment, including Tricaster setup, camera
operation, and YouTube streaming support for
bi-weekly Council meetings and special meetings
$400 per
meeting
Non-Critical After-Hours
Onsite Support
After-hours onsite work requested by the City
that is not tied to a P1/Critical incident for
covered systems
$125/hour, 2-
hour minimum
Major Infrastructure Projects Full server migration, new server deployment, network redesign, Microsoft 365 migration, new
application rollout, or other major project work
outside routine support
$95/hour or
fixed-fee SOW
SCADA Application-Level
Support
Full application-level management of SCADA
systems beyond infrastructure, OS, connectivity,
and vendor coordination
Scoped
separately
Chameleon Software
Application-Level Support
Application-level support beyond standard
infrastructure and vendor coordination
$95/hour
Physical Security Application
Support
Advanced Avigilon camera system or Honeywell
WinPAK support beyond basic connectivity and
vendor coordination
$95/hour
Independent Penetration
Testing
Third-party penetration testing coordination,
remediation planning, and reporting support
Third-party cost
plus $95/hour
coordination
Formal End-User Training Scheduled training for Microsoft 365, cybersecurity awareness, or other approved
topics
$750 per halfday session
Enhanced Backup and DR
Services
Additional backup retention, immutable backup
copies, expanded cloud storage, or full DR
exercise facilitation
Scoped
separately
Hardware Procurement
Support
Procurement coordination for workstations,
servers, network equipment, or peripherals
Hardware cost
plus 5%
procurement
coordination fee
Website Support /
Accessibility Review
Website updates, accessibility review, or
remediation planning for City web properties
Scoped
separately
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Routine help desk support, routine patching, backup monitoring, system monitoring, standard vendor coordination, Microsoft 365 administration, JAMF/iOS support, WatchGuard firewall support, emergency after-hours response for P1/Critical incidents, and scheduled onsite support are included in the base monthly fee.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 11: Transition
Overview
Consultadd's transition approach is designed to achieve operational continuity from day one, minimize disruption to City services, and build the documentation and access foundation required for long-term service quality. The transition is organized across three phases during the first 90 days.

The transition respects the City's ongoing operations, the sensitivity of Police Department and utility environments, and the staff's time. No Consultadd personnel will access CJIS-covered systems until all required fingerprinting, criminal history checks, and CJIS Security Addendum signing are complete.

Transition Phases
Phase Timeframe Key Activities Deliverables
Phase 1:

Access and
Discovery
Days 1 to 30 CJIS fingerprinting and background
check initiation for all applicable staff
• Secure credential and access
recovery from incumbent provider
or directly from City system owners
• Asset discovery across all six City
locations
• Network, server, and application
documentation baseline
• Stakeholder interviews: City
Manager, Finance Director,
department heads
• Ticket history review if available
from incumbent
Access and credential
register
• Preliminary asset
inventory
• Critical systems map
• Day-30 risk readout to
City management
• CJIS compliance status
report
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Phase Timeframe Key Activities Deliverables
• Backup environment validation
(confirm daily job coverage and
restorability)
• Critical systems mapping for
Police, WWTP, and City Hall
servers
• Monitoring platform deployment
and alert configuration
• PSA ticketing system setup and
workflow configuration
Phase 2:

Stabilization
Days 31 to
60 Monitoring normalization and alert
threshold tuning
• Patch baseline assessment for all
servers and workstations
• Backup validation test and
restorability confirmation
• Incident and escalation workflow
drills with City staff
• Vendor contact matrix finalized
(SCADA, printers, cameras, access
control, ISP)
• Weekly and monthly reporting
cadence established
• Council meeting A/V runbook
developed if optional scope is
awarded
• WatchGuard firewall configuration
documentation completed
Complete asset inventory
• Monitoring dashboard
operational
• Patch compliance
baseline report
• Backup validation
report
• Vendor matrix
• Weekly reporting
initiated
• Infrastructure
documentation draft
Phase 3:

Optimization
Days 61 to
90 12-month technology roadmap
developed and presented to City
leadership
• Security posture review and gap
recommendations
• Documentation completion:
network diagrams, runbooks, server
configs
• Lifecycle register created for
hardware, software, and licensing
end-of-life tracking
• M365 license usage audit for
subscription rationalization
• Optional service recommendations
with cost estimates
12-month technology
roadmap
• Full documentation
package
• Lifecycle register
• First QBR deck
• Optional service
recommendations
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Phase Timeframe Key Activities Deliverables
• First quarterly business review
scheduled
Incumbent Transition
The City has indicated that the current service provider's identity is not being disclosed as part of the RFP process. Consultadd's transition plan is designed to be provider-agnostic and does not depend on incumbent cooperation, although cooperation from the incumbent provider would accelerate the documentation phase.

Key elements of the provider-agnostic transition approach:
• Credentials and access recovered directly from City staff and system owners, not reliant on incumbent handoff
• Independent asset discovery using remote and on-site tooling rather than inheriting incumbent records • Network and server documentation built from live environment inspection • Backup environment validated through direct testing
• CJIS access established independently through the City Police Department process CJIS and Police Department Transition
The Police Department environment requires careful handling during the transition period:
• No Consultadd staff will access CJIS-covered systems until all fingerprinting, background checks, and CJIS Security Addendum signing are fully complete
• CJIS clearance processing is prioritized as the first administrative step following contract award • Physical infrastructure inventory at the Police Department location is conducted under escort for nonsystem access tasks during the clearance window • Police MDT, CLETS, and public safety systems are documented and baselined as soon as CJIS clearances are in place
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Section 12: Miscellaneous
12a. Additional Certifications, Credentials, and Licenses Certification / Credential Held By Relevance to City of Livingston GSA Multiple Award
Schedule (MAS)
Consultadd Inc. Federal procurement vehicle validating
competitive pricing and delivery capability;
provides future procurement flexibility
SOC 2 Type II Consultadd Inc. Third-party validated security, availability, and confidentiality controls for service delivery
operations
ISO 27001 Consultadd Inc. International information security management system certification
CMMC Ready Consultadd Inc. Cybersecurity Maturity Model Certification readiness supporting compliance-sensitive
public-sector environments
Microsoft Partner Consultadd Inc. Certified Microsoft capabilities relevant to City's M365, Hyper-V, Entra ID, and Windows
environment
AWS Advanced Tier Partner Consultadd Inc. Cloud delivery capability for backup, cloud services, and infrastructure modernization
options
DBE, MBE, SBE, and
related certifications
Consultadd Inc. Supplier diversity certifications supporting the City's contracting objectives
CompTIA Security+,
Network+, A+
Applicable
assigned staff
Foundational security and technical support
certifications
Microsoft 365 and Azure
Certifications
Applicable
assigned staff
M365 administration, Entra ID, and Azure
capabilities for City's Microsoft environment
ITIL Foundation Applicable
assigned staff
Service management framework supporting
structured help desk and escalation practices
CJIS Security Awareness
Training
All staff assigned
to Public Safety
systems
All staff assigned to CJIS-covered systems will
complete required training and clearance before
any Public Safety access is provisioned
12b. What Makes Consultadd Unique
Consultadd Public Services brings a combination of capabilities that align directly with the City of Livingston's evaluation priorities:

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Differentiator Why It Matters for the City of Livingston Cross-department
government operating
experience
The City requires support across City Hall, Police, Public Works, WWTP, and utilities. Consultadd has supported government clients with comparably diverse department mixes, understanding the different risk profiles, access controls, and operational rhythms of each environment.

CJIS-aware public safety
support
Police Department access requires a fundamentally different compliance posture. Consultadd's team completes required CJIS training, signs the Security Addendum, and maintains access discipline consistent with FBI CJIS Security Policy Version 6.0.

Microsoft 365 and HyperV depthThe City's primary environment is Microsoft-centric: M365, Hyper-V, Entra ID, Windows, and WatchGuard. Consultadd's Microsoft Partner status and certified team bring direct expertise in managing this environment.

Incumbent-agnostic
transition approach
Without a confirmed incumbent handoff, Consultadd's plan builds documentation through live discovery rather than inherited records, reducing the risk of knowledge gaps during the critical first 30 days.

Transparent and
predictable commercial
model
A fixed monthly fee with clearly separated optional services gives City leadership budget certainty. All optional and project work requires City authorization before it begins.

Named accountability at
every level
The City can identify the Executive Sponsor, Project Manager, Senior Engineer, and Field Technician by name and understand each person's role before award. There is no generic team structure.
15 years of public-sector
delivery
80+ public-sector clients and 250+ projects provide operational depth that shortens the learning curve and reduces transition risk for the City. 12c. CJIS Security Certificates
Consultadd currently has 50+ employees who hold a current CJIS Security Awareness / CJIS Security Certificate.

For the City of Livingston engagement, all Consultadd personnel assigned to roles requiring physical or logical access to the City’s Public Safety systems, CLETS-connected infrastructure, or CJIS-covered data will complete the City-required fingerprinting, criminal history check, CJIS Security Addendum signing, and any related CJIS training or certification requirements before access is provisioned.

Consultadd’s CJIS access model for the City includes:

1. CJIS-covered access limited to City-approved personnel only

2. No offshore or non-cleared access to CJIS-covered systems

3. Unique and identifiable usernames for all contractor personnel

4. MFA and secure remote access methods where supported

5. Access logging to support auditability and accountability

6. Immediate access removal when personnel leave the engagement or no longer require access

7. Security escalation for any incident involving Public Safety or CJIS-covered systems City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] System access to CJIS-covered systems will not be provisioned to any Consultadd employee or subcontractor until all City-required clearance, training, and access approval steps are complete. 12d. Familiarity with the CJIS Security Policy
Consultadd has direct experience supporting public-sector clients in law enforcement-adjacent environments. Our team's CJIS familiarity includes:
• Working knowledge of the FBI CJIS Security Policy (Version 6.0, dated December 27, 2024) covering access control, personnel security, audit and accountability, media protection, and incident response requirements
• Understanding of CJIS Security Addendum requirements and the signing obligations for all personnel with any logical or physical access to covered systems
• Remote access controls: all remote access to CJIS-covered systems is conducted through encrypted, MFA-protected sessions; no offshore or non-cleared staff may access CJIS systems under any circumstance
• Unique and attributable account management: all contractor staff maintain unique system usernames with full access logging to support audit requirements
• Incident response escalation: immediate notification to the City's designated CJIS System Officer or equivalent contact for any CJIS-relevant security event • No escorted access model: Consultadd's approach requires full CJIS compliance for all staff accessing covered systems, consistent with the City's Q&A response confirming that escorted remote access is not an acceptable substitute
12e. Technology Stack
Stack Category Type / Platform Role for City of Livingston RMM (Remote
Monitoring and
Management)
Professional RMM platform with
24/7/365 monitoring and remote
remediation capabilities
Continuous monitoring of all servers,
workstations, and network devices;
automated alerting; remote support;
patch deployment automation
PSA (Professional
Services Automation)
Enterprise ticketing and service
management platform
Ticket intake, categorization, SLA
tracking, resolution documentation,
weekly reporting, and time tracking
BDR (Backup and
Disaster Recovery)
Backup monitoring and
management tooling
Daily monitoring of City's existing
cloud backup environment (2.3TB);
failure alerting; restorability validation
coordination
Endpoint Protection
(EDR)
Endpoint detection and response
platform
Advanced threat detection and response
for Windows workstations and servers
across all City locations
Email Security Spam filtering platform
coordination
Management and alert review for City's
existing Inky spam filtering
deployment
City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Stack Category Type / Platform Role for City of Livingston MFA Platform Microsoft Authenticator and
hardware authenticator support
Supporting the City's current MFA
deployment for all staff and systems
MDM (Mobile Device
Management)
JAMF with Apple Business
Manager
Managing 68 City-owned iOS devices;
blueprint and profile management;
remote wipe; app update enforcement
Identity and Access
Management
Microsoft Entra ID User and group management for 131
M365 licensed users; conditional
access policy management; CJIS-aware
access controls
Network Security WatchGuard firewall
management
Firewall rule management, VPN
configuration, and security log
monitoring for 3 City WatchGuard
firewalls
12f. Incident Response for a Security Event
Phase Actions

1. Identify Detection through monitoring alerts, user reports, or vendor notifications. Initial triage to confirm the event and classify severity. Immediate engagement of the Security and Compliance Lead.

2. Contain Isolation of affected systems, accounts, or network segments to prevent lateral movement. Affected systems taken offline or quarantined if required. CJIS-relevant systems handled per CJIS Security Policy protocols.

3. Communicate Immediate notification to the City point of contact and Project Manager (Nisha K.).

Escalation to Executive Sponsor (Bharat Bhate) for critical events. Notification to City's CJIS System Officer if CJIS-covered systems are involved.

4. Remediate Root cause identification and elimination. Malicious artifacts removed. Systems restored from clean backup where required. All affected credentials reset. Network access re-validated before system reconnection.

5. Recover and
Review
Full service restoration and validation. Post-incident documentation and root cause analysis report delivered to City management. Recommendations to prevent recurrence. Security control updates or runbook revisions as applicable. 12g. Ransomware Incident Response
To the best of Consultadd’s current knowledge, none of Consultadd’s managed IT clients have experienced a ransomware attack in the last 12 months.

If a ransomware event is suspected or confirmed in the City’s environment, Consultadd will follow an immediate, structured response process focused on containment, communication, backup validation, controlled recovery, and post-incident hardening.

City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Consultadd’s ransomware response process includes:

1. Immediate isolation of affected systems from the network to contain spread

2. Disabling of compromised accounts or access pathways

3. Notification to the City’s designated point of contact and escalation to executive and security resources

4. Assessment of whether Public Safety or CJIS-covered systems may be affected

5. Backup integrity validation before any restoration begins

6. Coordination with the City’s cyber insurance carrier, legal counsel, or external forensic partner if applicable

7. Restoration from clean backup where required

8. Full environment scan before restored systems are reconnected to the network

9. Documentation of the incident timeline, affected systems, recovery actions, root cause, and lessons learned

10. Security control updates, user awareness reinforcement, and runbook updates to reduce recurrence risk
For any ransomware event involving Public Safety systems, CLETS-connected infrastructure, or CJIScovered data, Consultadd will follow the City’s escalation requirements and applicable CJIS incident handling procedures.
12h. Backup Validation Strategy
• Daily backup job monitoring: automated alerts for any backup failure or incomplete job in the City's cloud backup environment
• Monthly backup health review: verification that all critical systems are included in backup scope, that retention periods are being met, and that backup data sizes are consistent with expectations • Periodic restorability testing: scheduled restoration tests to confirm that backup data can be recovered within acceptable timeframes. The City has confirmed a successful restorability test was completed within the past year.
• Restore test documentation: each test is documented with test date, systems tested, recovery time, data integrity result, and any issues identified
• Backup validation report: included in monthly operational reporting to City management Restorability testing cadence will be defined in the services agreement based on the City's requirements and the criticality of covered systems.
12i. Independent Third-Party Penetration Testing
Yes. Consultadd has supported and coordinated independent third-party penetration testing and security assessment activities for client environments. Due to client confidentiality, Consultadd does not disclose client names or sensitive test details in proposal responses.

Consultadd’s role in third-party penetration testing typically includes:

1. Coordinating test scope, timing, and rules of engagement with the client and testing provider

2. Preparing system owners, vendors, and technical contacts for the assessment

3. Supporting secure access and testing windows where required

4. Reviewing findings with the client and third-party tester City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected]

5. Prioritizing remediation actions based on severity, exploitability, and operational impact

6. Tracking remediation through closure

7. Updating documentation, runbooks, and security controls based on validated findings For the City of Livingston, independent penetration testing can be provided as an optional service. If the City elects to proceed, Consultadd will help define scope, coordinate the third-party provider, review findings with City leadership, prioritize remediation, and track corrective actions through completion. 12j. PCI Compliance Familiarity
Consultadd has familiarity with PCI DSS requirements as they apply to managed IT infrastructure.

Relevant practices we apply in applicable client environments:
• Network segmentation support to isolate payment card processing systems from general City IT infrastructure
• Firewall rule review and documentation consistent with PCI DSS network access control requirements
• Patch management cadence aligned with PCI DSS timeframes for critical patch deployment • Access control and logging practices consistent with PCI DSS access management and audit requirements
• Coordination with the City and its PCI Qualified Security Assessor if the City's environment undergoes a formal PCI assessment
Consultadd is not a PCI QSA firm and does not provide PCI certification services. We support the infrastructure management practices that underpin the City's compliance posture. 12k. Additional Cloud Solutions and Technology Options
Consultadd offers the following additional technology solutions as optional services for the City of Livingston's future needs:
• Microsoft Azure cloud services: cloud backup redundancy, Azure Virtual Desktop for business continuity, or cloud-hosted application options for operational flexibility • Microsoft 365 optimization: license usage audit to right-size the City's 131 M365 licenses; Teams telephony options to consolidate VoIP and collaboration into a single platform • Enhanced security monitoring: expanded security event correlation or coordination with a managed SOC for around-the-clock threat monitoring beyond standard RMM security alerting • Digital accessibility readiness: DOJ Title II requires local governments under 50,000 population to meet web and mobile accessibility standards by April 2028. Consultadd can support website accessibility planning in coordination with the City's optional web support scope. • Hardware lifecycle planning: with workstations averaging approximately 5 years in age, a structured refresh plan coordinated through applicable cooperative purchasing vehicles can be built into the firstyear roadmap • Subscription and license rationalization: the City's software subscription obligations can be audited and right-sized during the first 90 days to eliminate unused capacity and reduce costs City of Livingston IT Services RFP May 29, 2026
Consultadd Inc. (dba Consultadd Public Services) +1 888 771 9958 | [email protected] Appendix
A. Key Personnel Resumes
Bharat Bhate
Executive Sponsor | Founder & CEO, Consultadd Inc.

PROFESSIONAL SUMMARY
Bharat Bhate is the Founder and CEO of Consultadd Inc., a U.S.-based IT services and consulting firm serving public-sector, enterprise, and government clients across 44 states. Since founding Consultadd in 2011, he has grown the company to $35M in annual revenue, built a team of 600+ IT professionals, and established partnerships with AWS, Microsoft, and other leading technology providers. He holds an MBA from the University of Chicago Booth School of Business and an MS in Information Systems, and is an AWS Certified Solutions Architect – Professional. Mr. Bhate serves as Executive Sponsor and Authorized Representative for this engagement, providing contractual authority, executive escalation, and board-level communication.

RELEVANT CREDENTIALS
Certification: AWS Certified Solutions Architect – Professional (Validation: QKVXZ2SBD1Q4QHGL) Education: MBA, University of Chicago Booth School of Business Education: MS, Information Systems, Stratford University (GPA 4.0, Summa Cum Laude) Recognition: 2020 Globe Award in Leadership
Recognition: Consultadd ranked in Inc. 500 and "Great Place to Work" Top 500

CORE COMPETENCIES
• Public-Sector IT Services • Executive Stakeholder Engagement • IT Infrastructure & Managed Services • Contract Authority & Vendor Management • Cloud Strategy (AWS, Azure) • P&L and Financial Oversight • Cybersecurity Program Oversight • Team Building & Organizational Leadership

PROFESSIONAL EXPERIENCE
Consultadd Inc. January 2011 – Present
Founder & Chief Executive Officer
• Scaled Consultadd to $35M in annual revenue with a 25% gross profit margin, supporting public-sector, enterprise, and government IT service clients across 44 U.S. states.
• Built a 600+ person team of IT engineers, project managers, helpdesk technicians, and cybersecurity professionals delivering managed IT, infrastructure, cloud, and application services. • Established Consultadd Public Services practice, serving government, education, and public-serving organizations including housing authorities, municipalities, and utility districts. • Chartered global cloud infrastructure rollouts and hybrid cloud strategies for institutional clients; formulated reusable deployment templates reducing implementation time by 50%. • Launched a cloud security division that grew to over 12% of net revenue within 12 months; oversees cybersecurity service delivery across managed services engagements.
• Maintains executive-level accountability for all client engagements, including OHLEG, CJIS, and compliance-sensitive publicsector contracts. • Serves as Authorized Representative and Executive Sponsor for the Great Parks of Hamilton County IT Infrastructure Support engagement, providing contractual authority and executive escalation.

Tixdo Inc., Pune, India February 2016 – March 2018
Co-Founder & CEO
• Co-founded and scaled a ticketing platform to 100,000 app downloads and 500,000+ tickets sold within three months; sold the company to the second-largest ticketing platform in India.

EzVsa Inc., Dallas, TX March 2015 – March 2016
Co-Founder & CEO
• Launched a legal immigration SaaS platform with 10,000+ end users, attorneys, and employer accounts; resolved operational immigration issues while generating new revenue.

Nisha K.

Project Manager | IT Services & Managed Engagements

PROFESSIONAL SUMMARY
Nisha K. is a Senior Project Manager with 10+ years of experience managing complex IT and technology services projects across public-sector, enterprise, and healthcare organizations. She specializes in managing multi-functional IT engagements from initiation through closure, with expertise in stakeholder management, SLA governance, resource coordination, risk mitigation, and reporting.

At Consultadd, she manages day-to-day delivery coordination, governance reporting, issue tracking, and client communication for IT infrastructure and managed services engagements.

RELEVANT CREDENTIALS
Methodologies: Agile (Scrum, Kanban), Waterfall, Lean, Six Sigma, PMBOK Tools: JIRA, MS Project, Trello, Confluence, Asana, Rally, Power BI, Tableau Compliance: HIPAA, GDPR, IAM, SSO, MFA, SSL/TLS compliance experience Education: Graduate-level IT project management background

CORE COMPETENCIES
• IT Engagement Management • Budget & Cost Management
• SLA Governance & Reporting • Agile & Waterfall Delivery • Stakeholder Communication • Client Relationship Management • Risk & Issue Tracking • Onboarding & Team Coordination • Resource Scheduling • Process Improvement

PROFESSIONAL EXPERIENCE
Consultadd Inc. July 2024 – Present
Project Manager, Public Services Practice
• Manages day-to-day delivery coordination for IT infrastructure and managed services engagements within Consultadd's Public Services practice, supporting government and public-sector clients across the U.S. • Oversees SLA governance, monthly reporting, escalation coordination, and stakeholder communication for multiple concurrent managed IT engagements.
• Tracks issue logs, change requests, risk registers, and service performance metrics; delivers structured monthly reports to client stakeholders and internal leadership.
• Coordinates onboarding, OHLEG-sensitive access compliance, and personnel scheduling for compliance-governed public-sector contracts.
• Leads structured governance reviews, participates in annual service audits, and drives continuous improvement across Consultadd's managed service delivery model.

Metropolitan Transportation Authority (MTA), New York City, NY January 2022 – June 2024 Senior Project Manager (via Consultadd Inc.)
• Managed staffing and delivery coordination for a team of 10+ professionals supporting an Oracle PeopleSoft upgrade improving data management and business processes for a large public transit authority. • Developed and maintained detailed project plans including timelines, resource allocation, and risk mitigation strategies; ensured on-time delivery within budget.
• Coordinated with Oracle consultants and internal IT teams to customize and integrate PeopleSoft solutions, minimizing disruption and improving system performance.
• Led Agile Scrum ceremonies and stakeholder reporting, providing regular updates to leadership and addressing delivery risks before escalation.
• Managed staff turnover through targeted retention, recruitment, and onboarding to maintain project continuity across the engagement lifecycle.

Kimberly-Clark Corporation, Irving, TX June 2019 – December 2021 Project Manager
• Directed a Workday HCM and finance deployment for a team of 12 professionals; achieved a 25% reduction in operational costs and improved process efficiency through structured implementation management. • Executed comprehensive project plans covering planning, configuration, testing, go-live, and post-deployment support; coordinated with Workday consultants and internal HR and finance teams. • Facilitated Agile Scrum practices including sprint reviews and retrospectives; improved team throughput and delivery predictability.

CVS Health April 2016 – May 2019
Project Coordinator
• Coordinated staffing and delivery for a 15+ person SAP implementation project; supported timelines, schedule tracking, and client-facing status reporting.
• Developed project documentation including detailed plans, user guides, and training materials; handled administrative logistics and cross-team communication.

Accenture July 2014 – March 2016
Senior Business Analyst
• Led Power BI data visualization implementations, creating dashboards and reports supporting strategic decision-making for enterprise clients.
• Gathered and translated business reporting requirements into technical specifications; conducted SQL and Excel-based data analysis to identify improvement opportunities.

Joseph Stokes
Senior Systems / Network Engineer | Consultadd Public Services

PROFESSIONAL SUMMARY
Seasoned Systems and Network Administrator with 15+ years of hands-on experience in MSP and enterprise IT environments, specializing in Windows Server, Microsoft 365, Hyper-V, VMware, VPN, endpoint security, patch management, RMM tooling, and help desk operations. Has directly supported municipal government technology environments, including police/fire CAD systems, in-vehicle VPN and wireless infrastructure for law enforcement, and multi-site city IT deployments. Brings NinjaOne, Wazuh, Datto, and Barracuda MSP stack experience alongside current Security+ and CCNA coursework. At Consultadd Public Services, serves as Senior Systems and Network Engineer for the City of Livingston engagement, responsible for server administration, Microsoft 365 management, Hyper-V support, WatchGuard firewall support, JAMF-coordinated mobile device management, backup monitoring, VPN support, Tier 3 escalation, weekly reporting, and primary point of contact for public safety technology support.

CORE COMPETENCIES
▸ Windows Server 2016/2019/2022 Administration ▸ Microsoft 365 / Intune / Azure AD ▸ Hyper-V & VMware Virtual Environment Support ▸ RMM / MSP Tools (NinjaOne, ConnectWise) ▸ WatchGuard / SonicWall Firewall & VPN ▸ Patch Management & Software Updates ▸ Datto Backup / BDR Coordination ▸ Barracuda Spam Filtering ▸ JAMF / Apple Business Manager Support ▸ Wazuh Security Monitoring ▸ Active Directory, GPO, DNS/DHCP ▸ Public Safety / Municipal IT Support ▸ Network Troubleshooting & Documentation ▸ ServiceNow / Zendesk / Remedy Ticketing

CREDENTIALS
Certifications: CompTIA A+ Certification | CompTIA Network+ Certification In Progress: CompTIA Security+ | Cisco CCNA
Training: Kevin Mitnick Security Awareness Training | Tri-Tech Systems Admin | Military Leadership Training
Education: Bachelor of Science (in progress) – Park University

PROFESSIONAL EXPERIENCE
Consultadd Inc. — Public Services Practice | Senior Systems / Network Engineer January 2025 – Present
• Serves as Senior Systems and Network Engineer for the City of Livingston managed IT engagement, providing primary technical support for server infrastructure, Microsoft 365, Hyper-V, WatchGuard firewalls, JAMF-managed iOS devices, network operations, and backup coordination across six City locations. • Administers Windows Server environments including Active Directory, DNS, DHCP, GPO management, and user account administration; supports Hyper-V virtual machine management, health monitoring, and Tier 3 escalation. • Manages Microsoft 365 tenant administration including Exchange Online mailboxes, Teams, SharePoint, Intune endpoint management, Azure AD, MFA configuration, and Microsoft Authenticator deployment support. • Supports WatchGuard firewall management at City Hall/Police Department, WWTP, and Well 17 locations; administers VPN configurations and remote access support for MDTs and remote PC users. • Coordinates JAMF/Apple Business Manager-enrolled device management for City iOS phones (58 devices) and iPads (10 devices); supports enrollment, blueprint assignment, and mobile device troubleshooting. • Manages Inky email filtering configuration, monitors alert queues, and coordinates remediation of phishing and spam incidents for all Microsoft 365 user accounts.
• Oversees backup monitoring for cloud-based daily backups (2.3TB estate); validates backup completion, coordinates restorability testing, and documents backup status for weekly City reporting. • Provides Tier 3 escalation for complex infrastructure incidents including server failures, network outages, and Hyper-V guest VM issues; coordinates vendor escalation for SCADA, Chameleon, and Honeywell WinPAK systems supported by incumbent vendors.
• Produces weekly reports covering system monitoring, patch status, help desk activity trends, backup results, and open incident summaries for City leadership.
• Supports CJIS Security Policy compliance for all access to Police Department systems; completes required fingerprinting, background check, CJIS Security Addendum signing, and maintains unique identifying credentials for all system access.

Kimbel Mechanical (formerly Gibson Plumbing) | Helpdesk / Desktop Support Manager May 2022 – December 2024
• Spearheaded design, deployment, and maintenance of Windows 10/11 systems across 350+ devices, leveraging remote monitoring tools for performance evaluation, inventory management, device configuration, OS imaging, and patch management.
• Managed virtualized server environments (VMware and Hyper-V); administered MS Exchange Online mailboxes, security policies, and distribution groups with comprehensive antivirus and Datto/Barracuda backup and filter management. • Performed VPN client/server troubleshooting and deployment; administered Verkada and Unifi video/access control systems; managed Group Policy Objects and Active Directory OU structuring using PowerShell. • Transitioned on-premises Active Directory accounts to Azure environment with Office 365; streamlined application modernization, network optimization, and DNS/DHCP traffic management.

Rezult Group — Contractor at Marathon Petroleum | IT Support Professional October 2021 – April 2022
• Supported and troubleshot all electronic devices for 800+ team members; resolved hardware and software issues with minimum disruption.
• Implemented and enforced IT Asset Management processes, policies, and standards in compliance with IT infrastructure platform requirements.

Y&L Consulting — Contractor at Pro-Vigil Surveillance | Network Engineer February 2021 – September 2021
• Provided remote technical support for mobile and fixed unit nationwide networks across 3,500+ locations; delivered Tier III support for 29,000+ devices.
• Troubleshot, restored, configured, and programmed network devices, cameras, and speaker systems; assisted in reducing service ticket volume by 95%.

Swipe Track Solutions | Senior Systems Engineer
April 2017 – October 2020
• Provided support and upgrades to all system infrastructure across two companies (27 bingo halls); managed helpdesk and provided technical support including periodic data backups using NAS storage. • Installed Unifi APs, cameras, and security systems to monitor and load-balance performance; evaluated systems and created custom solutions for mobility, technology, and marketing needs.

San Antonio Lighthouse for the Blind | Network Administrator September 2015 – April 2017
• Conducted hardware diagnostics, repair, upgrades, installation, and configuration across 11 military bases in TX, OK, and NM; installed and maintained all switches, routers, and firewalls on Cisco LAN/WAN. • Managed server and workstation backups; added and modified users in Active Directory and Cisco VoIP telephone systems.

Self-Employed — Independent Network Administrator | Network Consultant January 2014 – September 2015
• Delivered independent network administration and infrastructure support services to small business clients.

City of San Antonio — Information Technology Services | Network Administrator March 2009 – October 2013
• Configured, installed, and managed NetMotion VPN software on 900 police/fire department vehicles; installed ComputerAided Dispatch (CAD) software on 600+ laptops and migrated legacy 2G/3G modems to 4G/LTE. • Assisted in planning and installing cameras on 600 police vehicles, reducing video upload time from 60 minutes to 10 minutes; installed and configured 1,000+ wireless access points, switches, and routers for city buildings. • Configured wireless APs for Transportation Signal System infrastructure impacting 1,400 traffic intersections.

Florian Andrade
Field Support Engineer / L2 Systems Engineer | Consultadd Public Services

PROFESSIONAL SUMMARY
MSP-trained Systems Engineer and Field Support professional with 20+ years of experience delivering onsite and remote IT support across multi-client environments, including California-based municipal and commercial organizations. Expert in Microsoft 365 and Azure Active Directory administration, Windows Server, Hyper-V, ConnectWise, ITGlue, Kaseya, Active Directory, Group Policy, asset management, backup and disaster recovery, and desk-side user support. Brings deep familiarity with MSP toolsets, documentation practices, and structured client support workflows. At Consultadd Public Services, serves as the Field Support and L2 Systems Engineer for the City of Livingston engagement, providing three scheduled onsite visits per week across City locations, workstation and endpoint support, Microsoft 365 and Azure AD administration, Hyper-V support, backup coordination, documentation, and user training support.

CORE COMPETENCIES
▸ Microsoft 365 / Office 365 / Exchange Online ▸ Azure Active Directory & User Management ▸ Windows Server Administration ▸ Hyper-V Administration ▸ ConnectWise Manage/Control (PSA/RMM) ▸ Kaseya Endpoint Management ▸ ITGlue Documentation Platform ▸ Active Directory & Group Policy ▸ Backup & Disaster Recovery ▸ Onsite / Desk-Side End User Support ▸ Asset Tracking & Procurement Policy ▸ SharePoint / OneDrive / Egnyte ▸ DUO / MFA Administration ▸ Network Appliances & Printer Support

CREDENTIALS
Skills: Windows 10/11, Microsoft Exchange, Active Directory, Group Policy, Dell KACE, VMware, Symantec Backup, Arconis, Office 365, GFI Vipre AV Education: Associate's Degree in Information Technology – Masters Institute, San Jose, CA

PROFESSIONAL EXPERIENCE
Consultadd Inc. — Public Services Practice | Field Support / L2 Systems Engineer April 2025 – Present
• Serves as the designated Field Support and L2 Systems Engineer for the City of Livingston managed IT engagement, providing three scheduled onsite visits per week (three hours per visit) across City Hall, Police Department, Public Works, WWTP, and other City locations.
• Performs onsite workstation support including hardware troubleshooting, desktop configuration, OS imaging, software installation, peripheral setup, and user assistance for approximately 89 workstations across six locations. • Administers Microsoft 365 user accounts, Exchange Online mailboxes, SharePoint, Teams, and OneDrive; manages Azure Active Directory provisioning, role assignments, group memberships, and MFA enrollment using Microsoft Authenticator.
• Supports Windows Server environments including user administration, file share permissions, Group Policy configuration, DHCP, DNS, and Active Directory maintenance alongside Senior Systems Engineer. • Provides Hyper-V administration support for City virtual machine environments; assists with VM health checks, storage management, snapshot coordination, and escalation support. • Coordinates onsite backup verification for local and cloud backup systems; validates daily backup completion, documents exceptions, and escalates anomalies to Senior Engineer and Project Manager. • Maintains ITGlue-equivalent documentation for onsite infrastructure including network diagrams, configuration records, device inventory, and change logs in support of the City's weekly and monthly reporting requirements. • Provides onsite coordination for JAMF-enrolled iOS device support, including device enrollment assistance, app deployment verification, and Apple Business Manager liaison support. • Completes required CJIS fingerprinting, background check, and Security Addendum signing before accessing Police Department systems; maintains unique identifying credentials for all system access.

Ontara IT Solutions — San Antonio, TX | Systems Engineer April 2022 – March 2025
• Administered Office 365 and Microsoft 365 environments including Azure Active Directory, ensuring secure access, user management, and compliance across multiple client accounts. • Managed Windows Server infrastructure including configuration, maintenance, patching, and troubleshooting; utilized ConnectWise Manage/Control, ITGlue, and Kaseya for remote monitoring, ticketing, documentation, and endpoint management.
• Provided comprehensive Windows desktop support and resolved complex technical issues for multi-client MSP environments.
415it — San Rafael, CA | Systems Engineer
June 2020 – February 2022
• Administered Office 365, Azure Active Directory, and Google Workspace environments; managed hosted Windows Server environments and provided end-user desktop support across multiple client accounts. • Utilized ConnectWise and ITGlue for ticketing, remote management, and documentation; administered DUO MFA, Egnyte/Dropbox/OneDrive, and SharePoint platforms.

MyTGroup — Burlingame, CA | Systems Engineer
February 2017 – April 2020
• Served as Systems Administrator for a large manufacturing concern; administered Office 365, Hyper-V, and Windows Server environments.
• Managed user accounts, equipment rollouts, and integration of industrial equipment alongside corporate IT systems; maintained Active Directory, Exchange, and file server infrastructure.

Coyote Networking — San Jose, CA | Contractor / Systems Administrator February 2013 – January 2017
• Supported real estate, property management, high-end audio, and industrial HVAC clients with maintenance and administration of email, file, and application server backups across multiple backup formats. • Installed and maintained Microsoft Exchange 2010 servers; supported disaster recovery, active directory administration, and developed asset tracking policies and procurement procedures for a large real estate firm. • Provided desk-side support including system deployment, application support, system upgrades, and physical server rack hardware maintenance.

Moss Adams LLP / Mohler Nixon & Williams LLP — Campbell, CA | Help Desk Support 2010 – 2013
• Provided Tier 2/3 support for a 230-employee accounting and CPA firm; conducted imaging operations for new and legacy hardware using Ghost and Dell KACE servers.
• Performed security software transition from McAfee SaaS to GFI VIPRE; participated in infrastructure migration between domains; supported SSD transition for business assurance department laptops.

Independent IT Contracting — San Jose, CA | Contractor / Systems Administrator 2001 – 2010
• Delivered IT solutions to commercial real estate, property management, high-end audio, retail, and tax preparation clients; supported servers, desktops, laptops, printers, and network appliances. • Administered Blackberry Enterprise Servers, Windows Servers, Exchange Servers, network printers, and remote PC access; delivered end-user support for multi-location clients.

Brandon Edgar
Help Desk / Technical Support Specialist | Consultadd Public Services

PROFESSIONAL SUMMARY
Seasoned IT operations professional with 15+ years of experience in Tier I/II help desk support, systems administration, network operations, cybersecurity practices, and technical training delivery across enterprise, government, and academic environments. Holds ITIL Foundation v4, CompTIA A+, Network+, and Security+ CE certifications and is DoD 8140 IAT Level II compliant. Demonstrated ability to manage high-volume service request queues, prioritize tickets by mission impact, maintain IT documentation, and deliver end-user training. Military and government background provides strong familiarity with access controls, structured escalation, and compliance-governed environments. At Consultadd Public Services, serves as Help Desk and Technical Support Specialist for the City of Livingston engagement, providing 24/7/365 Tier 1 and Tier 2 help desk coverage, ticket intake, Microsoft 365 support, hardware and software troubleshooting, documentation, escalation, and user assistance for approximately 106 City staff across six locations.

CORE COMPETENCIES
▸ Tier I / Tier II Help Desk Support ▸ ITIL-Based Ticket Management & Escalation ▸ Microsoft 365 / Office Suite Support ▸ Active Directory & User Account Management ▸ Windows Server 2016/2019 Support ▸ Network Troubleshooting & Documentation ▸ Cybersecurity Practices & Access Controls ▸ DHCP / DNS / NTP Administration ▸ Cisco & Brocade Switch Configuration ▸ IT Asset Documentation & Record Keeping ▸ End-User Training & Communication ▸ CompTIA A+, Network+, Security+ CE ▸ ITIL Foundation v4 ▸ DoD 8140 IAT Level II Compliant

CERTIFICATIONS & CREDENTIALS
Certifications: ITIL Foundation v4 | CompTIA A+ CE | CompTIA Network+ CE | CompTIA Security+ CE
Compliance: DoD 8140 IAT Level II Compliant | DoD 1750 (Instructor Supervisor) Certified License: FAA Part 107 Remote Pilot License #4552760 (Active, Recertified 2025) Education: Bachelor of Arts in Liberal Arts (English Literature) – Excelsior College, Albany, NY

PROFESSIONAL EXPERIENCE
Consultadd Inc. — Public Services Practice | Help Desk / Technical Support Specialist January 2026 – Present
• Serves as Help Desk and Technical Support Specialist for the City of Livingston managed IT engagement, providing 24/7/365 Tier 1 and Tier 2 support for approximately 106 City staff across City Hall, Police Department, Public Works, WWTP, and additional City locations.
• Manages incoming service requests through the ticketing system; prioritizes tickets based on impact severity and City operational needs; documents all actions taken and escalates complex issues to Senior Systems Engineer or Project Manager per defined escalation procedures.
• Provides end-user support for Microsoft 365 applications including Outlook, Word, Excel, PowerPoint, Teams, SharePoint, and OneDrive; assists with password resets, account lockouts, MFA enrollment, and Microsoft Authenticator configuration. • Supports hardware and software troubleshooting for Windows 10/11 workstations, laptops, iOS devices, and peripherals; assists with printer, scanner, and peripheral device support across City locations. • Maintains IT documentation and technical records including service desk notes, configuration changes, and incident logs to support continuity of operations and compliance reporting. • Delivers hands-on end-user training and guidance for Microsoft 365 tools, common software applications, and basic cybersecurity awareness to City staff; reduces repeat incident volume through proactive user education. • Supports onboarding of new City staff including account provisioning coordination, workstation setup, email configuration, and device enrollment assistance.
• Completes required CJIS fingerprinting, background check, and Security Addendum signing before accessing Police Department systems; maintains unique identifying credentials for all City system access.

USAF — Sheppard Air Force Base, TX | IT & Telecommunications Instructor September 2024 – December 2025
• Trained 40+ USAF and Marine Corps students per class cycle on copper and fiber optic cable installation, splicing, and repair, ensuring proficiency in mission-critical network systems. • Managed student progress through Learning Management System (LMS) and Technical Training Management System (TTMS), achieving 100% on-time completion rate; achieved 1750 Training Supervisor requirements 50% faster than standard timeline.
• Revised and enhanced technical course content to exceed training standards; provided hands-on troubleshooting demonstrations equipping students with real-world IT problem-solving skills.

SAIC — Fort Sill, OK | Network & Systems Analyst / Technical Trainer August 2022 – July 2024
• Delivered comprehensive instruction to 200+ military students annually on advanced Air Defense systems including ADSI, FAAD, AMDWS, TAIS, and AFATDS, improving operator proficiency by 30%. • Configured and optimized Cisco and Brocade network switches across multiple VLANs; managed IT enterprise architecture supporting 140A schoolhouse training programs with 24/7 availability. • Integrated and maintained servers for three classified/unclassified LAN environments including Active Directory, DHCP, DNS, NTP, and file servers, reducing downtime incidents by 40%; achieved zero major security incidents during two years of operations.

Northwestern State University — Natchitoches, LA | IT Support Specialist October 2019 – June 2020
• Managed Active Directory accounts for 500+ faculty and staff; provided Tier II IT support for hardware, software, and Office 365, resolving 15–20 service requests daily with a 95% satisfaction rating. • Planned and executed deployment of 100 new Dell computers including imaging, installation, and user training; supported university-wide Office 365 adoption, increasing platform usage by 30%.

Thomas Sebastian Wolfe
vCIO / Strategic IT & Security Advisor | Consultadd Public Services

PROFESSIONAL SUMMARY
IT executive, vCIO, and cybersecurity risk advisor with extensive experience improving information technology availability, performance, governance, and cost control across government, healthcare, nonprofit, financial services, education, and mid-size organizations. Has served as outsourced CIO and managed services executive for 250+ clients across regulated and compliance-sensitive environments. Holds CISSP, CISA, Security+, and Network+ credentials with graduate-level education in Information Security and IT Management. At Consultadd Public Services, serves as vCIO and Security and Compliance Advisor for the City of Livingston engagement, providing IT strategic roadmap development, cybersecurity governance support, risk management, disaster recovery and business continuity planning, vendor management, budget alignment, quarterly business review leadership, CJIS-aligned access governance advisory, and executive-ready reporting for City leadership.

CORE COMPETENCIES
▸ vCIO Services & IT Strategic Roadmaps ▸ Cybersecurity Governance & NIST CSF Alignment ▸ CJIS / CLETS Compliance Advisory ▸ Disaster Recovery & Business Continuity Planning ▸ IT Governance, Service Catalogs & QBRs ▸ Budget, Lifecycle & Replacement Planning ▸ FERPA, HIPAA, PCI-DSS, FISMA, SOC 2 ▸ Vendor Management & Technology Procurement ▸ Incident Response Planning & Tabletop Exercises ▸ Infrastructure, Cloud & Data Center Strategy ▸ Service Desk, SLA & Managed Services Oversight ▸ Executive Stakeholder Communication

CERTIFICATIONS & CREDENTIALS
Certifications: CISSP – Certified Information Systems Security Professional | CISA – Certified Information Systems Auditor | Security+ CE | Network+ CE | Microsoft Certified Professional (MCP) | Microsoft Certified Technology Specialist (MCTS) Education: Master of Business Administration (IT Management) – Western Governors University
Education: Master of Science in Information Security & Assurance – Western Governors University
Education: Bachelor of Science in Information Technology – Western Governors University

PROFESSIONAL EXPERIENCE
Consultadd Inc. — Public Services Practice | vCIO / Strategic IT & Security Advisor August 2024 – Present
• Provides vCIO and Security Advisory leadership for the City of Livingston managed IT engagement, translating operational needs into strategic roadmaps, lifecycle plans, budget priorities, cybersecurity governance guidance, and executive-ready quarterly business review materials.
• Advises delivery team on IT governance, risk management, change communication, vendor oversight, service catalog practices, and CJIS-aligned access governance for the City's Police Department systems and public safety environment. • Develops and maintains 12-month IT roadmap for City of Livingston covering infrastructure lifecycle, cybersecurity uplift, backup and DR testing schedules, Microsoft 365 maturity, and asset replacement priorities framed in plain business language for City leadership.
• Leads quarterly business reviews with City leadership, presenting system health, incident trends, security posture, open risks, and forward planning recommendations aligned to City budget realities. • Supports disaster recovery and business continuity planning, including RPO/RTO documentation, tabletop exercise planning, and backup validation review in coordination with Cybersecurity Risk Advisor. • Coordinates cybersecurity incident response posture review, security awareness guidance, and NIST CSF-aligned risk register development for the City's mixed environment including City Hall, Police, utilities, and Public Works. • Provides budget alignment support, vendor contract review, and technology procurement advisory to help the City optimize IT spending across the contract term.

Profitabil-IT: IT Advisory & Cybersecurity Risk Management | Managing Principal – Fractional CIO/CISO Services
January 2018 – July 2024
• Supported mid-market organizations, advisory firms, and managed service providers as an IT strategy, cybersecurity, governance, and fractional CIO/CISO expert; served 250+ clients as outsourced CIO through managed service providers. • Delivered NIST CSF, SOC 2, DFARS/NIST 800-171, GLBA, NYS DFS, HIPAA, and PCI-DSS advisory across regulated environments including banking, defense, healthcare, higher education, and government. • Delivered CISSP-level cybersecurity compliance support (via a Big 4 firm) for a top banking organization; conducted DFARS/NIST 800-171 audit readiness for a top defense contractor; served as cybersecurity GRC architect for a leading mortgage lender.
• Completed IT enterprise and cybersecurity architecture audits for a Fortune 100 retailer; completed third-party risk assessments for a $2B+ state university; led SOC 2 program development and readiness assessments for multiple SaaS organizations.

Easterseals Blake Foundation — Tucson, AZ | Chief Information Officer / Director of IT Operations January 2015 – December 2017
• Led agency-wide IT and information security transformation across 10 office locations and 30 healthcare facilities for a ~1,100-employee medical non-profit; managed capital budget, department strategy, technical strategy, and a highperforming engineering and contractor team. • Won the CIO 100 Award (CIO.com/IDG) recognizing innovative technology use to deliver business value; reduced confirmed firewall vulnerabilities by 96.91% and potential vulnerabilities by 94.74%. • In-sourced disaster recovery while outsourcing vaulting, realizing 80% net savings while improving capabilities and recovery times; in-sourced service desk, improving client satisfaction 18% and technician capacity 40% while lowering operating costs 11%.
• Deployed MDM, DLP, encryption at rest, two-factor authentication, secure email, 802.1x network security, and endpoint protection across the enterprise.

University of Arkansas — Little Rock, AR | Deputy CIO / Interim CIO / Director of Operations January 2014 – December 2014
• Co-led IT department with $6M operating budget; 4 direct and 30+ indirect reports across Systems, Networks, Applications, Procurement, and IT Security; served as Interim CIO and provided backup authority for PMO and Client Support.
• Built executive IT Services strategic plan and roadmaps (1-, 3-, and 5-year); championed infrastructure improvements, VMware modernization, high-availability SAN, and SolarWinds unified monitoring. • Estimated $775K in savings through contract renegotiations, VoIP upgrades, role realignment, and new service catalog development.

Hardcastle Trading — Secaucus, NJ | Director of North America Technology Operations January 2010 – December 2013
• Led operations management and service delivery at four co-located data centers supporting revenue-critical, low-latency high-frequency trading operations with 99.999% trading-hour uptime SLA. • Managed $500K+ in major IT projects including server re-engineering, transatlantic circuit replacement, 64-bit upgrades, routing changes, and SolarWinds monitoring; cut recurring power costs 50%.

New York State Office of Information Technology Services | Contractor – Technical Project & Vendor Management
January 2008 – December 2009
• Supported multi-agency technical project delivery, vendor coordination, requirements development, network planning, infrastructure deployment, and site readiness activities. • Coordinated large-scale technology initiatives across state, city, county, and affiliated agencies with technical staff, contractors, and vendors.

Ngum Che
Cybersecurity Risk Advisor | Consultadd Public Services

PROFESSIONAL SUMMARY
Senior Cybersecurity and GRC Leader with 10+ years of experience driving compliance and risk management programs for federal agencies, healthcare organizations, and cloud-based enterprises. Holds Certified Information Systems Auditor (CISA) and AWS Solutions Architect – Associate credentials with deep expertise in NIST Cybersecurity Framework, NIST 800-53 Rev 5, HIPAA, FedRAMP, FISMA, ISO 27001, SOC 2, PCI DSS, CMMC, and incident response program development. Proven track record leading cybersecurity gap assessments, disaster recovery and business continuity planning, incident response programs, tabletop exercise facilitation, and vulnerability management for federal and publicsector clients. Member of ISACA, Cloud Security Alliance (CSA), and InfraGard (FBI Public-Private Partnership). At Consultadd Public Services, serves as Cybersecurity Risk Advisor for the City of Livingston engagement, providing CJISaligned cybersecurity risk review, incident response planning, backup and DR validation advisory, risk register development, vulnerability management coordination, security reporting, and compliance documentation support.

CORE COMPETENCIES
▸ NIST CSF & NIST 800-53 Rev 5 ▸ CJIS Security Policy Compliance Advisory ▸ FedRAMP Authorization Lifecycle ▸ Cybersecurity Gap Assessment & Risk Registers ▸ Incident Response Planning (NIST 800-53 IR) ▸ Disaster Recovery / BCP Planning (RPO/RTO) ▸ Tabletop Exercise Facilitation ▸ SIEM & Monitoring (Splunk, ELK, Datadog, Wazuh) ▸ Cloud Security (AWS, Azure) ▸ HIPAA, FISMA, SOC 2, PCI DSS, CMMC ▸ Vulnerability Management (Nessus, Qualys,
Rapid7)
▸ Vendor Risk Assessment & Third-Party Due Diligence
▸ GRC Platforms (ServiceNow, RSA Archer, Drata) ▸ Zero Trust Architecture (NIST SP 800-207)

ACTIVE CERTIFICATIONS & CREDENTIALS
CISA: Certified Information Systems Auditor – ISACA | License #232129243 | Current AWS: AWS Certified Solutions Architect – Associate | Valid through July 2026 CompTIA: Security+ CE – Current
Splunk: Splunk Core Certified User | Splunk Certified Power User – Current In Progress: CISSP – Exam Scheduled Q2 2026
Education: M.Eng., Cybersecurity Policy & Compliance Strategy – George Washington University (2019–2020)
Education: B.A.Sc., Business Administration – Information Technology – Shawnee State University (2014–2017)
Affiliations: ISACA Member | Cloud Security Alliance (CSA) Member | InfraGard Member (FBI Public-Private Partnership)

PROFESSIONAL EXPERIENCE
Consultadd Inc. — Public Services Practice | Cybersecurity Risk Advisor May 2025 – Present
• Serves as Cybersecurity Risk Advisor for the City of Livingston managed IT engagement, providing CJIS-aligned cybersecurity risk review, incident response planning, backup and DR validation advisory, risk register development, vulnerability management coordination, and compliance documentation for City leadership. • Advises on CJIS Security Policy Version 6.0 compliance for Police Department system access, remote support controls, access logging requirements, background check governance, and CJIS Security Addendum administration; translates CJIS requirements into practical operational controls for the City's mixed environment. • Develops and maintains City-specific incident response plans and playbooks aligned with NIST 800-53 IR control families; facilitates tabletop exercises to validate detection, escalation, and containment procedures for ransomware and other cyber incident scenarios.
• Leads backup validation reviews and disaster recovery readiness assessments; documents RPO/RTO objectives and validates backup restorability testing schedules for City's 2.3TB cloud backup estate. • Conducts cybersecurity gap assessments aligned with NIST CSF for City environment covering City Hall, Police, WWTP, Public Works, and Well 17 locations; produces risk register with prioritized remediation roadmap for City leadership. • Provides advisory oversight for SOC monitoring activities, alert triage classification, severity escalation, and cybersecurity incident response coordination; delivers monthly cybersecurity and vulnerability status reports to City stakeholders. • Supports PCI-DSS awareness and compliance documentation review for applicable City systems; provides security control review and compliance reporting support across NIST CSF and applicable public-sector regulatory frameworks.

Rackspace Technologies, Inc. | Senior Risk and Compliance Management Specialist May 2023 – April 2025
• Led cybersecurity gap assessments aligned with NIST 800-53 Rev 5 and FedRAMP requirements across multi-cloud environments (AWS, Azure) for enterprise clients; designed scalable exceptions management program reducing SLA timelines by 50%.
• Partnered with procurement, legal, and security teams to evaluate 100+ vendor contracts for compliance with data privacy, encryption, and residency controls; coordinated with external assessors to remediate security control gaps and improve audit readiness.
• Delivered cloud compliance training to 500+ engineers and product managers; streamlined RMF documentation through AI-based automation in Jira/Confluence, reducing ISSO documentation preparation time by 40% across 1,000+ cloud assets.
• Accelerated compliance program maturity from ad-hoc to managed level within 12 months; built reusable control frameworks supporting concurrent FedRAMP, SOC 2, and ISO 27001 initiatives.

HealthVerity, Inc. | Senior Security Analyst / FedRAMP Lead January 2022 – April 2023
• Served as de facto ISSO for AWS-hosted SaaS environment pursuing FedRAMP Moderate ATO; managed complete FedRAMP authorization lifecycle including SSP authorship, POA&M management, SAP/SAR coordination, and 3PAO engagement.
• Conducted cybersecurity gap analysis against NIST 800-53 Rev 5 baseline, identifying and prioritizing 127 control deficiencies with remediation roadmaps; improved FedRAMP audit readiness scores by 50% and reduced ATO timeline by 25% (18 months to 13.5 months).
• Developed enterprise third-party risk management program supporting 700+ vendors; implemented automated security questionnaire workflows reducing vendor onboarding time by 40%.

Department of Veterans Affairs Medical Center (via Technical Consulting & Research, Inc.) | Information Security Lead
January 2019 – December 2021
• Led HIPAA, FISMA, and FedRAMP security control implementation across AWS-hosted healthcare platforms supporting 20,000+ federal users across multiple VA medical centers. • Designed and implemented disaster recovery (DR) and business continuity (BCP) plans with defined RPO (4 hours) and RTO (8 hours); developed incident response procedures and playbooks aligned with NIST 800-53 IR control family. • Maintained continuous ATO status across 3-year engagement with zero major audit findings; established KnowBe4 security awareness program reducing user-driven security incidents by 30% annually.

Technical Consulting & Research, Inc. | Governance, Risk & Compliance Lead January 2017 – January 2019
• Architected cloud-first GRC programs for healthcare SaaS and government contractor clients aligned with NIST CSF, ISO 27001, SOC 2, and FedRAMP; accelerated authorization timelines by 35% through structured control documentation and evidence management.
• Conducted NIST 800-53 Rev 5 control implementation and testing; performed vulnerability assessments and security architecture reviews for cloud environments (AWS, Azure); developed IT risk registers using NIST RMF methodology. • Supported 5 clients through successful SOC 2 Type II audits with zero qualified opinions; established automated compliance monitoring reducing manual evidence collection by 25 hours per month.

Letter of Reference for Consultadd Inc. - Public Services Division Marin Housing Authority
4020 Civic Center Dr.

San Rafael, CA 94903,
United States
Phone Number: (41 5) 49 l-2525, Ext. 7 04
Email : [email protected]
Dated: luly 10,2025
To Whom lt May Concern,
Marin Housing Authority engaged Consultadd Inc. - Public Services Division under Contract No. 2025-001 to provide Managed IT, CIO, and Cybersecurity Services. Their team delivered 2417 monitoring, helpdesk support, network management, endpoint protection, and ensured compliance with HUD cybersecurity standards.

With their steady expertise in managing our IT infrastructure, including servers, devices, and enterprise applications, Consultadd has supported system reliability, security, and regulatory compliance. Their consistent responsiveness and professionalism have made them a trusted part of our extended team.

We recommend Consultadd Inc. for organizations seeking capable IT and cybersecurity services.
ly,
ignature)
Kim Dolan
Chief Financial Officer
Marin Housing Authority
1610 Moorland Road • Madison, WI 53713-3398 • (608) 222-1201 • madsewer.org 30th March 2026
Batina Culver
1610 Moorland Rd
Madison, WI 53713
To Whom It May Concern,
Madison Metropolitan Sewerage District, the District, engaged ConsultAdd Inc. to provide access to quality IT resources for the District. We established a Master Services Agreement, MSA, to establish an agreed upon rate card. The first statement of work, SOW, we established with ConsultAdd is to deliver 24x7 response to priority 1 tickets, helpdesk support, hardware management, onboarding, support 3 COT systems, and several custom developed solutions.

Through the expertise and quality resources provided, Consultadd has supported system reliability, availability and secure access. Consultadd introduced quality review practices to ensure quality support was delivered to the District. Their responsiveness, quality review practices, and professionalism have made them a trusted extension of the IT Team.

We recommend ConsultAdd as a partner that can deliver quality resources delivering quality support services across a vast technology landscape.

Sincerely,
Batina Culver
District Technology Manager

Response to Request for Proposal
(Technical / Cost)
to

INFORMATION TECHNOLOGY SERVICES
Issued by

CITY OF LIVINGSTON, CA

Due: BEFORE 4:30 p.m. Friday, May 29, 2026
Datanetiix Solutions Inc
19800 MacArthur Blvd, #300,
Irvine, California 92612
Contact Person: Bala Sriraghavan, CEO and Co-Founder
Email: [email protected] Phone: 949-340-2540
Datanetiix Solutions Inc
Datanetiix Solutions Inc 2
Information Technology Services
City Of Livingston, CA
Cover Letter
May 29, 2026
Monica Cisneros, Deputy City Clerk
City of Livingston
1416 “C” Street, Livingston, CA 95334
[email protected]
RE: Response to Request for Proposals for Information Technology Services, City of Livingston, California
Dear Ms. Cisneros and Members of the Evaluation Committee, Datanetiix Solutions Inc. (Datanetiix) is pleased to submit our proposal in response to the City of Livingston's Request for Proposals for Information Technology Services. We have carefully reviewed the RFP in its entirety, including all responses to vendor questions issued through the date of this submission, and confirm that our proposal addresses every requirement outlined in the solicitation.

Datanetiix is a California-based managed IT services firm founded in 2008, with 18 years of continuous operation serving municipalities, tribal governments, and public agencies across the United States. Active engagements include the Torres Martinez Desert Cahuilla Indians in Riverside County, Warwick Hotels and Resorts, and Sapphire at School, all under structured managed IT and SLA requirements comparable to the City of Livingston's scope.

Datanetiix maintains ISO 9001:2015, ISO 27001IS for Information Security, CMMC Level 2, and the U.S. Department of Commerce Data Privacy Framework certification, and holds active certifications as a California DGS Small Business, MBE through NMSDC, and WBE and WOSB through WBENC.

This submission includes completed responses to Sections 1 through 12, and current certificates of insurance. The terms and commitments in this proposal are firm and binding for 120 days from the date of submission.

Datanetiix accepts all Special Requirements outlined in the RFP, including CJIS Security Addendum execution and fingerprinting for all staff accessing public safety systems. No lawsuits, judgments, or liens are pending against the firm, and the firm is not under investigation by any government entity.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 3
Information Technology Services
City Of Livingston, CA
All questions regarding this proposal should be directed to Name Bala Sriraghavan, Chief Executive Officer and Co-Founder Company Datanetiix Solutions Inc.

Address 19800 MacArthur Blvd, Suite 300, Irvine, CA 92612 Phone (949) 340-2540
Email [email protected]
Datanetiix dispatches field technicians through its California-region network, providing on-site coverage for all six of the City of Livingston's Merced County locations. The City of Livingston will have a dedicated partner with the technical depth, compliance posture, and operational accountability to support its departments and residents for the full term of this engagement.

Respectfully submitted,
Bala Sriraghavan
Chief Executive Officer and Co-Founder
Datanetiix Solutions Inc.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 4
Information Technology Services
City Of Livingston, CA
Table of Contents
Cover Letter..................................................................................................................................................2

1. General Company Information .................................................................................................................5

2. References.................................................................................................................................................7

3. Staffing.................................................................................................................................................... 11

4. Security ...................................................................................................................................................16

5. Services...................................................................................................................................................21

6. Monitoring ..............................................................................................................................................39

7. Management............................................................................................................................................42

8. Documentation, Record Keeping and Reporting ....................................................................................46

9. Fees.........................................................................................................................................................50

10. Optional Fees........................................................................................................................................59

11. Transition ..............................................................................................................................................62

12. Miscellaneous .......................................................................................................................................65 Datanetiix Solutions Inc
Datanetiix Solutions Inc 5
Information Technology Services
City Of Livingston, CA

1. General Company Information
a. Provide an overview of your company, including:
i. The year your company was started and the number of years providing managed IT services and help desk support.

Datanetiix Solutions Inc. was founded in Irvine, California, in 2008 and has provided managed IT services and help desk support continuously since its founding, representing 18 years of uninterrupted operation as of 2026. Active managed services engagements include the Torres Martinez Desert Cahuilla Indians, a federally recognized tribal government in Riverside County, California, supported since 2021, Warwick Hotels and Resorts, supported since August 2023, and Sapphire at School, a California-based education technology organization, all under full-scope managed IT and help desk agreements. ii. Number of customers and average size of customers’ organizations Datanetiix currently supports
75-plus active client
organizations across tribal
government, municipal,
education, healthcare,
nonprofit, and commercial
verticals. The managed
services client base ranges
from small public-sector
agencies with 15 to 50 staff members to mid-size enterprises with 200 to 500 employees, with the majority of engagements falling in the 20 to 150 endpoint range. Clients within the active portfolio operating at a scale comparable to or larger than the City of Livingston's environment of approximately 105 endpoints and 5 servers include the Torres Martinez Desert Cahuilla Indians, Warwick Hotels and Resorts, and Sapphire at School.
iii. Number of employees
Datanetiix employs more than 100 information technology professionals organized across infrastructure and systems engineering, cybersecurity and security operations, Microsoft 365 and cloud administration, help desk and end-user support, and project management and delivery governance. All client-facing roles for the City of Livingston, including help desk operations, field dispatch, account management, service governance, and 24/7/365 monitoring and support, are staffed by onshore US-based personnel. Offshore delivery resources are available where required based on specific client needs and engagement scope, but all primary support, infrastructure administration, and CJIS-sensitive functions for the City of Livingston are performed exclusively by onshore personnel. Datanetiix maintains a dedicated bench of certified engineers available for account assignment, ensuring that staffing transitions and planned absences do not reduce service capacity, and has sustained this depth continuously since 2008 without a gap in managed services delivery across any active engagement.
iv. Background and history
Datanetiix Solutions Inc. was founded in Irvine, California in 2008 by Bala Sriraghavan, Chief Executive Officer and Co-Founder and Sasikala Kannan, President and Co-Founder using personal capital without venture funding. The firm holds ISO 9001:2015 for Quality Management, ISO 27001:2013IS for Information Security, CMMC Level 2 compliance, and the U.S. Department of Commerce Data Privacy Framework certification, and maintains active certifications as a California Department of General Services Small Business, a Minority Business Enterprise through the National Minority Supplier Datanetiix Solutions Inc
Datanetiix Solutions Inc 6
Information Technology Services
City Of Livingston, CA
Development Council, and a Women's Business Enterprise and Women-Owned Small Business through the Women's Business Enterprise National Council. Datanetiix is a certified Microsoft Partner and has delivered managed IT services, cybersecurity, cloud administration, and technology staffing to publicsector, tribal government, education, nonprofit, and commercial organizations across the United States for 18 continuous years.
v. Office locations
Datanetiix Solutions Inc. is headquartered at 19800 MacArthur Blvd, Suite 300, Irvine, California 92612, with a research and development office in Aliso Viejo, California. All managed services delivery, client governance, account management, help desk operations, and field dispatch for the City of Livingston engagement will be coordinated from the Irvine headquarters. Datanetiix is a California-domiciled corporation, registered with the California Secretary of State under Entity Number 3073320, and subject to California law for all contractual and operational purposes.

Location Function
19800 MacArthur Blvd, Suite 300, Irvine, CA 92612 Headquarters, Primary Client Operations Aliso Viejo, California Research and Development
b. Are there any lawsuits, judgments or liens pending against your organization as a result of services provided by your company and/or that would negatively impact your company’s ability to provide managed IT services to the City?
No lawsuits, judgments, or liens are pending against the firm because of services provided by the firm or that would negatively impact the company's ability to provide managed IT services to the City of Livingston.
c. Is your company currently under investigation by any entity? If yes, include an explanation. ____Yes 🗸 No
Datanetiix Solutions Inc
Datanetiix Solutions Inc 7
Information Technology Services
City Of Livingston, CA

2. References
a. Provide contact information (and the number of years your organization has provided managed IT and help desk services) for four references, as follows:
i. The organization your company has supported for the longest period of time.

Datanetiix has served as the primary managed IT services provider for the Torres Martinez Desert Cahuilla Indians, a federally recognized tribal government in Thermal, Riverside County, California, since 2021. The tribe operates with a small administrative staff responsible for government services, public programs, and compliance-sensitive operations, directly comparable in structure and service obligations to the City of Livingston. Over four years, Datanetiix has managed 700-plus endpoints and 70-plus servers across on-premises and cloud infrastructure, covering Microsoft 365 GCC, Azure, VMware, Veeam, Barracuda email security, Active Directory, DNS and DHCP, cybersecurity governance, vendor coordination, and daily help desk support. SLA commitments have been met consistently with zero downtime recorded during major infrastructure transitions. The City of Livingston can expect the same operational consistency and accountability that Torres Martinez has received since 2021.

Field Detail
Organization Torres Martinez Desert Cahuilla Indians
Sector Federally Recognized Tribal Government
Contact Name Ramon Fregoso
Title Director of Information Technology
Address 66-725 Martinez Road, Thermal, California 92274 Phone (760) 397-0300
Email [email protected]
ii. A nonprofit or other organization with approximately 30 employees Datanetiix has provided managed IT services and help desk support to Sapphire at School, a Californiabased education technology organization headquartered in Costa Mesa, California, on an ongoing basis.

Sapphire at School operates with a small, focused team that depends on stable cloud infrastructure, reliable end-user support, and consistent application availability to deliver its programs. Datanetiix manages the organization's infrastructure, endpoints, Microsoft 365 environment, and help desk operations under a structured service model with defined response times. This engagement reflects the same service discipline the City of Livingston requires: a small organization where every user matters, system downtime has direct operational consequences, and the IT partner must respond without delay.

Field Detail
Organization Sapphire at School
Sector Education Technology, California
Contact Name Anoop Sharma
Title Partner
Address 1570 Corporate Drive, Suite C, Costa Mesa, California 92626 Phone (612) 501-9067
Email [email protected]
Datanetiix Solutions Inc
Datanetiix Solutions Inc 8
Information Technology Services
City Of Livingston, CA
iii. An organization with IT infrastructure, including Terminal Server for remote access, and support requirements comparable to the City
Datanetiix has provided managed IT services and help desk support to Warwick Hotels and Resorts LLC since August 2023. Warwick operates across multiple U.S. properties, each requiring continuous system availability, remote access for staff across locations, and centralized infrastructure management under a single service agreement. The environment includes Terminal Server and remote access infrastructure, a mixed device fleet across dispersed locations, and the same operational dependency on uninterrupted network connectivity that the City of Livingston requires across its six locations. Datanetiix manages this environment under 24/7/365 monitoring, defined SLA response commitments, and monthly compliance reporting, delivering the same service model proposed for the City of Livingston.

Field Detail
Organization Warwick Hotels and Resorts LLC
Sector Hospitality, Multi-Site Enterprise
Contact Name Lasarusa Ledua
Title Director of Information Technology USA
Address 1776 Grant Street, Denver, Colorado 80203
Phone (212) 247-2700
Email [email protected]
iv. A client whom you recently started supporting (since January 1, 2014).

Datanetiix has provided IT and technology services to Tecnoeka, Inc., a manufacturing and industrial technology organization based in North Carolina, since 2024. The engagement covers managed IT services and technology support under an active ongoing agreement. Tecnoeka operates across a structured business environment with defined operational continuity requirements, giving Datanetiix direct, current experience onboarding a new client, establishing service baselines, and delivering consistent support from day one of the engagement. The City of Livingston will benefit from this same onboarding discipline: Datanetiix documents the environment fully before making changes, establishes agreed service levels at the outset, and does not treat a new engagement as a learning period at the client's expense.

Field Detail
Organization Tecnoeka, Inc.

Sector Manufacturing and Industrial Technology
Contact Name Tricia Pope
Title NA
Address North Carolina, USA
Phone (704) 924-0307
Email [email protected]
b. Provide contact information for two vendor references with an annual obligation of $48,000 or higher.

Datanetiix maintains active commercial relationships with the vendors listed below, each carrying annual obligations exceeding $48,000. These relationships give the City of Livingston direct access to enterprisegrade licensing, cloud infrastructure, and cybersecurity platforms through a single managed services Datanetiix Solutions Inc
Datanetiix Solutions Inc 9
Information Technology Services
City Of Livingston, CA
partner, without the City of Livingston needing to negotiate, procure, or administer those vendor relationships independently.

Vendor Services Provided Annual
Obligation
What the City of
Livingston Gains
Contact
Information
Microsoft
Corporation
Microsoft Cloud
Solution Provider
(CSP), Microsoft 365
licensing, Azure cloud
services, infrastructure
management, identity
management,
productivity platforms,
endpoint management,
and cybersecurity
solutions
Exceeds
$48,000
Datanetiix administers all
Microsoft 365 licensing,
Azure consumption, and
identity services on behalf of
the City of Livingston. The
City receives enterprise
licensing and cloud services
at CSP pricing without
carrying a direct Microsoft
enterprise agreement or
managing license renewals
internally.

Available
upon request
through
authorized
Microsoft
partner
channels
Amazon
Web Services
(AWS)
Cloud infrastructure
services, virtual servers,
storage, backup and
disaster recovery,
networking, security
services, monitoring,
and application hosting
support
Exceeds
$48,000
Datanetiix manages all AWS
cloud infrastructure
supporting backup, disaster
recovery, and application
hosting on behalf of the City
of Livingston. The City
benefits from enterprisegrade cloud resilience
without managing cloud
consumption, cost controls,
or AWS account governance
directly.

Available
upon request
through
authorized
AWS partner
and account
management
channels
Adobe Enterprise Adobe
Creative Cloud
licensing, Acrobat
licensing, document
management solutions,
digital signature
solutions, and enterprise
software support
Exceeds
$48,000
Datanetiix administers Adobe
enterprise licensing for all
covered users, ensuring the
City of Livingston's staff
maintain uninterrupted
access to document
management and digital
signature tools without
managing license renewals or
compliance tracking
internally.

Available
upon request
subject to
vendor
authorization
Sophos Endpoint Detection and
Response (EDR),
Managed Threat
Response (MTR),
firewall security,
endpoint protection,
threat monitoring, and
cybersecurity
management solutions
Exceeds
$48,000
Datanetiix deploys and
manages Sophos EDR and
firewall protection across all
covered City of Livingston
endpoints and network
perimeters. When a threat is
detected, Sophos and
Datanetiix respond in
coordination, containing the
threat before it reaches City
Available
upon request
subject to
vendor
authorization
Datanetiix Solutions Inc
Datanetiix Solutions Inc 10
Information Technology Services
City Of Livingston, CA
Vendor Services Provided Annual
Obligation
What the City of
Livingston Gains
Contact
Information
systems or disrupts
operations.

Seqrite Endpoint security,
antivirus protection,
centralized endpoint
management,
ransomware protection,
and cybersecurity
solutions for enterprise
environments
Exceeds
$48,000
Datanetiix manages Seqrite
endpoint protection across
the City of Livingston's
device fleet, providing
centralized antivirus
enforcement, ransomware
detection, and endpoint
compliance monitoring. The
City receives continuous
protection without
administering security
software deployments or
updates directly.

Available
upon request
subject to
vendor
authorization
c. Provide a list of your company’s technology partners.

Datanetiix maintains active partnerships with the vendors listed below. These relationships allow Datanetiix to source, deploy, and support the tools the City of Livingston's environment requires, including Microsoft 365, Windows infrastructure, network hardware, endpoint protection, and backup systems, without the City managing separate vendor relationships or procurement processes. Where the City of Livingston's current environment includes Cisco, Juniper, and Ubiquiti network hardware, VMware, and VoIP systems, Datanetiix holds active partnerships with those same vendors, meaning the City receives support from a partner already familiar with those platforms.

Category Technology Partners
Cloud and Productivity Adobe, Amazon Web Services (AWS), Microsoft, Microsoft Azure
Virtualization Microsoft Hyper-V, VMware
Networking Cisco, Juniper Networks, Sophos, Ubiquiti
Cybersecurity CrowdStrike, Microsoft Defender, Seqrite, Sophos Backup and Disaster Recovery Acronis, Veeam Software
Monitoring, RMM, and PSA ConnectWise, Datto
Identity and Access Management Microsoft Entra ID
Email Security and Compliance Mimecast, Proofpoint
Mobile Device Management Microsoft Intune
Business Continuity and Disaster
Recovery
Acronis, Amazon Web Services (AWS), Microsoft Azure,
Veeam Software
Microsoft Partner Status
Datanetiix holds active Microsoft Partner status covering Azure, Microsoft 365, Dynamics 365, and the Power Platform. The City of Livingston operates a Windows environment across approximately 105 devices, and Datanetiix manages Microsoft licensing, tenant administration, and Windows infrastructure as a core service. The City will work with a partner that escalates Microsoft issues through dedicated partner support channels, not standard consumer queues.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 11
Information Technology Services
City Of Livingston, CA

3. Staffing
a. Provide an organizational chart of your company that reflects reporting relationships. `
b. Describe all staff that will support the City, including executive, project, help desk support, system administrators, engineers and account staff.

Datanetiix will provide the City of Livingston with a dedicated service-delivery structure designed specifically for municipal government operations that require high availability, security oversight, responsive support, and escalation management. The support model combines executive oversight, dedicated account management, senior engineering expertise, 24x7 help desk operations, and on-site field support to ensure continuity of operations across all City departments and facilities.

The proposed staffing model includes executive leadership involvement, a designated accountmanagement structure, and a tiered technical support organization consisting of Tier 1, Tier 2, and Tier 3 engineers with specialized expertise in Microsoft technologies, virtualization platforms, networking, cybersecurity, backup and disaster recovery, and remote-access environments.

Role Responsibility
Executive Sponsor Executive oversight, strategic governance, escalation management, and contract performance review
Account Manager / Service
Delivery Manager
Primary client liaison, service coordination, reporting, SLA oversight, and strategic planning
Datanetiix Solutions Inc
Datanetiix Solutions Inc 12
Information Technology Services
City Of Livingston, CA
Role Responsibility
Senior Project Manager IT project coordination, vendor management, infrastructure upgrades, and implementation planning
Help Desk Lead Daily ticket operations, dispatch coordination, user-support oversight, and escalation management
Tier 1 Support Technicians First-level support for end-user issues, password resets, desktop troubleshooting, Microsoft 365 support, and ticket intake
Tier 2 Systems Administrators Server administration, Active Directory management, virtualization support, backup management, and advanced troubleshooting
Tier 3 Infrastructure Engineers Advanced systems engineering, VMware/Hyper-V support, network troubleshooting, disaster recovery, and infrastructure optimization
Network Engineer Cisco, Juniper, and Ubiquiti network administration, firewall support, VPN management, wireless infrastructure, and
connectivity troubleshooting
Security & Compliance Lead Security monitoring, vulnerability remediation, endpoint protection oversight, incident response coordination, and CJISaligned security governance On-Site Support Representative Hardware deployment, workstation setup, physical troubleshooting, inventory coordination, and scheduled on-site support visits
All staff assigned to the engagement will operate under documented escalation procedures, service-level objectives, and security-access controls. Personnel supporting public safety or CJIS-related systems will undergo all required background investigations, fingerprinting procedures, and compliance onboarding as required by the City of Livingston Police Department and applicable CJIS Security Policy requirements.

Datanetiix’s staffing model is intentionally structured to provide both operational continuity and bench depth, ensuring the City is never dependent on a single technician or individual resource for critical support functions.
c. Describe your annual staff retention rate during the past three years Datanetiix measures staff retention using voluntary separation rate, calculated as voluntary departures divided by total headcount at the start of each year, excluding performance-related separations and contract completions. The firm has maintained a consistently high retention rate of 96 -98% across its technical and delivery teams over the past three years, supported by Top Workplaces recognition in 2024 and 2025 and active Great Place to Work certification. Datanetiix does not rotate engineers off active accounts to fill new engagements. Staff assigned to the City of Livingston remain on the account for the duration of the contract, and in the event of departure, a qualified replacement assumes full responsibility with complete account documentation already in place.
d. Provide the resume of any staff expected to work at the City office (e.g., the system administrator and/or network engineers).

Datanetiix will provide resumes for all on-site and city-facing personnel upon contract award and before the start of the onboarding period. Named individuals are confirmed after contract execution to ensure personnel are matched to the City of Livingston's specific environment, security requirements, and operating schedule before introductions are made.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 13
Information Technology Services
City Of Livingston, CA
Role Profiles
Executive Sponsor
The Executive Sponsor provides strategic oversight and executive governance for the City of Livingston engagement, committing 4 hours per month to leadership reviews, escalation management, and contract performance accountability. This role ensures that Datanetiix's senior leadership remains directly accountable to the City of Livingston for the full term of the engagement and that any issue requiring executive intervention receives a response without delay.

Account Manager / Service Delivery Manager
The Account Manager and Service Delivery Manager serve as the City of Livingston's primary point of contact for all service coordination, SLA reporting, and strategic planning activities, committing 10 hours per month to client communication, monthly performance reviews, and operational oversight. This role owns the relationship between Datanetiix and the City of Livingston and is directly accountable for service quality, response time compliance, and escalation resolution across every function of the engagement.

Senior Project Manager
The Senior Project Manager coordinates all IT projects, infrastructure upgrades, vendor engagements, and implementation activities for the City of Livingston, committing 8 hours per month to planning, scheduling, and delivery oversight. This role ensures that every planned change to the City of Livingston's technology environment is scoped in writing, approved before execution, delivered on schedule, and documented upon completion.

Help Desk Lead
The Help Desk Lead manages daily ticket operations, dispatch coordination, and user support oversight for the City of Livingston engagement, committing 160 hours per month to triage quality, escalation control, and service desk performance. This role reviews all open tickets daily, identifies recurring issues before they become systemic problems, and holds the Tier 1 and Tier 2 teams accountable for meeting every SLA commitment the City of Livingston has been promised.

Tier 1 Help Desk Technicians
Tier 1 Help Desk Technicians provide first-contact support for all City of Livingston staff across all six locations, committing 520 hours per month to password resets, Microsoft 365 issues, desktop troubleshooting, printer support, and general end-user requests. Every interaction is logged in the ticketing system from open to close, and any issue that exceeds Tier 1 resolution authority is escalated to Tier 2 within the timeframes defined in the service level agreement.

Tier 2 Systems Administrators
Tier 2 Systems Administrators handle server administration, Active Directory management, virtualization support, backup management, and advanced troubleshooting for the City of Livingston, committing 180 hours per month to infrastructure-layer support and escalated incident resolution. This team activates when an issue requires server-level access, tenant administration, or platform-layer intervention that Tier 1 cannot resolve through remote support tools.

Tier 3 Infrastructure Engineers
Tier 3 Infrastructure Engineers address the most complex technical challenges across the City of Livingston's environment, committing 60 hours per month to advanced systems engineering, VMware and Hyper-V support, disaster recovery operations, and infrastructure optimization. This team engages during Datanetiix Solutions Inc
Datanetiix Solutions Inc 14
Information Technology Services
City Of Livingston, CA
critical incidents, major outages, and architecture-level projects where Tier 2 resolution capacity has been exceeded, and the City of Livingston's core systems require immediate senior engineering intervention.

Network Engineer
The Network Engineer manages and supports the City of Livingston's Cisco, Juniper, and Ubiquiti network infrastructure across all six locations, committing 50 hours per month to firewall administration, VPN management, wireless infrastructure support, and connectivity troubleshooting. This role is deployed on-site when a network issue requires physical intervention and maintains ongoing documentation of the City of Livingston's network configuration to support rapid diagnosis and recovery during outages.

Security and Compliance Lead
The Security and Compliance Lead oversee security monitoring, vulnerability remediation, endpoint protection, incident response coordination, and CJIS-aligned security governance for the City of Livingston engagement, committing 40 hours per month to audit activities, threat response, and compliance documentation. This role maintains the City of Livingston's documented security posture, tracks CJIS certification status for all assigned staff, and coordinates directly with the Service Delivery Manager and Executive Sponsor during any confirmed security event.

On-Site Support Representative
The On-Site Support Representative provides physical presence at City of Livingston facilities three times per week, committing 36 hours per month to hardware deployment, workstation setup, physical troubleshooting, and inventory coordination across all six City locations. This role operates under the direction of the Service Delivery Manager and Lead Engineer, follows the City of Livingston's access and security protocols at every visit, and documents all on-site activities in the ticketing system before departing each facility.
e. Describe your job requirements for help desk staff
Datanetiix maintains standardized qualification requirements for all help desk personnel to ensure consistent service quality, technical competency, communication effectiveness, and security compliance across all supported client environments.

Minimum qualifications for Help Desk personnel include:
• Minimum 2–5 years of technical support experience in managed services or enterprise IT environments
• Demonstrated experience supporting Microsoft Windows desktop operating systems and Microsoft 365 applications
• Strong troubleshooting capabilities involving desktop hardware, printers, networking, email systems, and remote-access technologies
• Excellent verbal and written English communication skills • Customer service and user-interaction experience in professional business environments • Ability to document incidents, remediation actions, and escalation details accurately within the ticketing platform
• Familiarity with remote support and endpoint-management tools • Understanding of cybersecurity best practices, including phishing awareness, password management, and endpoint-protection procedures
All support personnel are subject to:
• Pre-employment background verification
• Employment-history validation
Datanetiix Solutions Inc
Datanetiix Solutions Inc 15
Information Technology Services
City Of Livingston, CA
• Education verification
• Confidentiality agreements
• Security-awareness training
Personnel assigned to environments containing law-enforcement or CJIS-related systems may additionally be required to complete criminal-history checks, fingerprinting, CJIS Security Awareness training, and other municipality-specific compliance requirements. f. Describe your staff development and training programs.

Datanetiix maintains an ongoing professional-development and technical-training program designed to ensure that engineering, support, cybersecurity, and operational personnel remain current with evolving technologies, cybersecurity threats, compliance obligations, and vendor best practices.

Technical staff participate in continuous education programs that include:
• Vendor-led certification training
• Internal technical workshops
• Security-awareness and compliance training
• Product-specific implementation labs
• Incident-response tabletop exercises
• Change-management and service-delivery training
Training programs are aligned with major technology platforms and vendors including:
• Microsoft
• Cisco
• VMware
• Sophos
• Veeam
• Azure
• Microsoft Security technologies
Areas of ongoing development include:
• Microsoft 365 and Azure administration
• Endpoint security and threat response
• VMware and Hyper-V virtualization
• Backup and disaster recovery operations
• Network-security best practices
• Identity and access management
• CJIS and security-compliance awareness
• NIST and CIS Controls alignment
Datanetiix encourages and supports industry certification attainment through structured learning plans, exam reimbursement programs, mentorship initiatives, and hands-on lab environments. Technical personnel are also required to complete recurring security-awareness and operational-process training as part of our internal governance and quality-assurance program.

Our development strategy is focused on ensuring that all client-facing personnel maintain both technical competency and strong customer-service capabilities appropriate for municipal-government support environments.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 16
Information Technology Services
City Of Livingston, CA

4. Security
a. Does your company hold any security certifications? If so, list current certifications and the year each were originally obtained.

Datanetiix maintains a strong security and quality governance framework aligned with internationally recognized standards and industry’s best practices. These certifications and designations support secure service delivery for enterprise and municipal environments.

Certification /
Designation Description Current Status
ISO 27001:2013IS Information Security Management System (ISMS) for security governance and risk
management
Active
ISO 9001:2015 Quality Management System for standardized service delivery and operational excellence
Active
CMMC Level 2 1.0 Cybersecurity maturity practices aligned with controlled unclassified information (CUI)
environments
Active
Microsoft Partner Microsoft-certified partner supporting Microsoft 365, Azure, security, and
infrastructure services
Active
Data Privacy Framework
Certification from US
Department of
Commerce
Governance framework aligned with industry
cybersecurity and privacy best practices
Active
Datanetiix continuously enhances its security posture through periodic audits, internal assessments, and alignment with evolving regulatory and cybersecurity frameworks applicable to public-sector and regulated environments.
b. List any security certificates held by staff who may work on our account Datanetiix assigns staff to each engagement based on the technical requirements, compliance obligations, and security profile of the client environment. Staff assigned to the City of Livingston engagement will hold current certifications appropriate to their role, including qualifications across information security, cloud security, network security, and endpoint protection disciplines. Upon contract award, Datanetiix will provide the City of Livingston with a complete certification register for every assigned staff member prior to the start of the onboarding period.

All staff requiring access to the City of Livingston's public safety systems will hold CLETS and a current FBI CJIS Security Awareness Certificate and will complete fingerprinting and background verification administered by the City of Livingston Police Department before receiving system credentials. Datanetiix tracks certification status and renewal dates for all assigned staff and initiates recertification before any credential lapses during the engagement.
c. Describe background checks performed for all staff.

Datanetiix maintains formal background screening and onboarding procedures to ensure secure, trustworthy personnel deployment across all client environments, particularly those involving municipal, regulated, or public-sector systems.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 17
Information Technology Services
City Of Livingston, CA
The standard screening process includes:
• Criminal history background verification
• Employment history validation
• Education and credential verification
• Identity verification
• Professional reference checks
• Confidentiality and acceptable-use agreement execution • Mandatory security awareness training before system access Additional requirements for public-sector / CJIS environments:

In alignment with the City of Livingston requirements, personnel supporting public safety systems or CJIS-related environments will comply with:
• Criminal history checks conducted by the City of Livingston Police Department • Fingerprinting as required by the City
• Execution of CJIS Security Addendum
• CJIS Security Awareness training completion
• Compliance with all City-defined access control and onboarding procedures Datanetiix also enforces strict offboarding controls to ensure immediate revocation of access, removal of credentials, and recovery of all company assets upon role change or termination d. Include your company’s security policies with regard to client access.

Datanetiix maintains a formal identity and access management (IAM) framework designed to enforce least-privilege access, accountability, and secure administrative control across all client environments.

Core security controls include:
• Role-Based Access Control (RBAC)
• Least-Privilege access enforcement
• Multi-Factor Authentication (MFA) for all administrative access • Unique user credentials for all personnel (no shared accounts) • Session logging and audit trail monitoring
• Periodic access reviews and entitlement validation
• Secure onboarding and offboarding procedures
• Segregation of privileged and non-privileged access accounts • Secure password and credential management standards
In alignment with the City of Livingston RFP requirements, Datanetiix ensures that each contractor employee is assigned a unique and identifiable system username to enable accurate logging, auditing, and accountability of all system activity.

Administrative access is granted only to authorized personnel based on defined operational roles and is regularly reviewed to ensure continued business justification.

Remote administrative access is secured through encrypted channels, MFA enforcement, endpoint security controls, and continuous monitoring systems designed to detect and prevent unauthorized activity.
e. Describe your strategy for securing your clients data.

Datanetiix utilizes a layered security approach designed to protect client systems, user identities, applications, and data across on-premises, cloud, and hybrid environments. Our security strategy is built Datanetiix Solutions Inc
Datanetiix Solutions Inc 18
Information Technology Services
City Of Livingston, CA
upon defense-in-depth principles and incorporates preventive, detective, and corrective controls to reduce operational risk and improve resilience against evolving cybersecurity threats.

At the identity and access layer, Datanetiix implements multi-factor authentication (MFA), conditionalaccess policies, least-privilege access controls, secure password policies, and centralized identitymanagement solutions. Endpoint security controls include advanced endpoint-detection and response (EDR) platforms, centralized antivirus management, vulnerability remediation, patch management, and device-compliance monitoring for desktops, laptops, tablets, and mobile devices.

At the infrastructure layer, network segmentation, firewall security policies, VPN security, wirelesssecurity controls, and continuous monitoring are utilized to protect network resources and limit lateral movement within the environment. Data-protection measures include encryption of sensitive data at rest and in transit, secure backup architectures, immutable backup strategies where applicable, and disasterrecovery procedures designed to support operational continuity.

Security monitoring and alerting capabilities are supported through centralized logging, endpoint monitoring, vulnerability assessments, and incident-response processes designed to rapidly identify and respond to suspicious activity or operational anomalies. Datanetiix continuously evaluates security controls and operational procedures to align with evolving best practices, regulatory requirements, and threat landscapes.
i. How does your company stay informed regarding security alerts and/or events? Datanetiix maintains continuous awareness of emerging cybersecurity threats, vulnerabilities, and operational-security advisories through multiple industry-recognized intelligence sources and vendorsecurity programs.

Security-awareness and threat-intelligence sources include:
• Cybersecurity and Infrastructure Security Agency (CISA) • MS-ISAC (Multi-State Information Sharing and Analysis Center) • Microsoft Security Response Center (MSRC)
• Cisco PSIRT
• Juniper Security Advisories
• Vendor security bulletins and product advisories
• Threat-intelligence feeds and security research publications • Industry security forums and operational-security communities Security alerts are reviewed and prioritized based on severity, exploitability, environmental relevance, and operational impact. Critical advisories are escalated internally for validation, remediation planning, patch deployment, or compensating-control implementation as appropriate. ii. How does your company notify and manage security events for your clients? Datanetiix maintains documented incident-response and security-event management procedures designed to support timely identification, escalation, containment, remediation, and communication during cybersecurity incidents or operational-security events.

Security events are prioritized based on severity, operational impact, affected systems, and potential business risk. Upon identification of a significant security event, designated technical and management personnel initiate escalation procedures and notify authorized client contacts in accordance with established service-level expectations.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 19
Information Technology Services
City Of Livingston, CA
Notification and communication methods may include:
• Direct phone notification for critical incidents
• Email alerts and status updates
• Ticketing-system notifications
• Executive escalation procedures for severe or prolonged incidents • Coordination meetings for active incident management
Critical security incidents are typically escalated immediately, with initial client notification targeted within one hour of confirmed incident classification, depending on event severity and available information.

Incident-response activities may include:
• Threat containment
• Endpoint isolation
• Credential-reset procedures
• Firewall or access-rule modifications
• Malware remediation
• Forensic-log review
• Backup restoration coordination
• Vulnerability remediation
• Vendor escalation where required
Following incident resolution, Datanetiix provides incident summaries, remediation documentation, and recommendations intended to reduce future operational risk and strengthen the client’s security posture. iii. How does your company manage mobile device security? Datanetiix manages mobile-device security through centralized Mobile Device Management (MDM) and Unified Endpoint Management (UEM) platforms designed to secure smartphones, tablets, and mobile endpoints used within client environments.

Mobile-device security capabilities include:
• Device enrollment and compliance management
• Multi-factor authentication enforcement
• Device encryption enforcement
• Conditional-access controls
• Application-protection policies
• Secure email and application access
• Remote lock and remote wipe capabilities
• Jailbreak/root detection
• Mobile-threat and compliance monitoring
• Device inventory and lifecycle tracking
For Microsoft-centric environments, Datanetiix commonly utilizes Microsoft Intune to manage mobiledevice compliance, policy enforcement, secure application access, and endpoint-security controls.

Security policies are designed to ensure that only compliant and authorized devices are permitted access to organizational resources, email systems, and cloud applications. Lost or compromised devices may be remotely isolated or wiped to reduce the risk of unauthorized access to sensitive information.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 20
Information Technology Services
City Of Livingston, CA
The City’s mobile environment, including smartphones, tablets, and remote-access devices, would be incorporated into centralized compliance and security-management processes as part of onboarding and operational support activities.
iv. How does your company ensure best security practices are being followed? Datanetiix aligns its operational-security practices with recognized cybersecurity frameworks, governance standards, and industry best practices to promote continuous improvement, operational consistency, and risk reduction across supported environments.

Our security-governance approach incorporates principles and controls aligned with:
• NIST Cybersecurity Framework (NIST CSF)
• CIS Controls Version 8
• ISO 27001 information-security practices
• Microsoft security best practices
• CJIS Security Policy requirements where applicable
Security and operational controls are reinforced through:
• Internal policy enforcement
• Periodic security reviews and audits
• Vulnerability-management processes
• Patch-management governance
• Endpoint-security monitoring
• Change-management procedures
• Access-control reviews
• Security-awareness training programs
• Incident-response testing and review exercises
Datanetiix also encourages ongoing technical certification and recurring security training for operational staff to ensure awareness of emerging threats, evolving attack methodologies, and updated compliance expectations.

Where applicable, independent assessments, penetration-testing activities, vendor-security reviews, and operational audits may be utilized to validate security controls and identify opportunities for improvement.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 21
Information Technology Services
City Of Livingston, CA

5. Services
a. What desktop support do you provide to clients (hardware and software)? Datanetiix provides comprehensive end-user desktop and workstation support services designed to ensure reliable day-to-day operations, minimize user downtime, and maintain a secure and standardized computing environment across all supported locations.

Our desktop-support services include both hardware and software support for Windows-based environments consisting of desktops, laptops, tablets, and mobile devices from multiple manufacturers and hardware platforms. The City of Livingston’s mixed-device environment will be supported through standardized support procedures, centralized monitoring, asset tracking, lifecycle management, and documented escalation processes.

Desktop and endpoint support services include:
• Hardware diagnostics and troubleshooting
• Coordination of manufacturer warranty claims and repair services • New workstation procurement recommendations and deployment • Operating-system installation, configuration,& support for Windows 10 and Windows 11 • Microsoft 365 and Office application support
• Printer, scanner, and peripheral-device support
• User-profile and login troubleshooting
• Software installation, configuration, and patching
• Endpoint security and antivirus management
• Remote troubleshooting and remote-control support
• User onboarding and offboarding
• Device imaging and standardization
• Endpoint inventory and asset tracking
• Lifecycle planning for replacement and retirement of devices • Data migration and workstation replacement coordination Datanetiix supports a wide range of business and municipal applications, including line-of-business applications, cloud-based applications, browser-based systems, productivity software, remote-access platforms, and mobile-device integration.

Support services are delivered through a combination of:
• Remote support tools
• Centralized help desk operations
• Proactive monitoring systems
• Scheduled onsite support
• On-demand dispatch support for hardware-related or location-specific issues The objective of our desktop-support model is to provide responsive and user-focused technical assistance while maintaining security, operational consistency, and minimal disruption to City operations.
b. Describe the support you provide for network hardware and operating systems.

Datanetiix provides comprehensive management, monitoring, maintenance, and support services for network infrastructure, server operating systems, virtualization platforms, and associated enterprise technologies.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 22
Information Technology Services
City Of Livingston, CA
Our network support services include administration and troubleshooting for:
• Cisco network infrastructure
• Juniper network devices
• Ubiquiti networking equipment
• Managed switches
• Routers
• Firewalls
• Wireless access points
• VPN connectivity
• Internet and WAN connectivity
• VLAN and network segmentation
• Network performance monitoring
Network-support activities include:
• Configuration management
• Firmware and security-update management
• Performance optimization
• Connectivity troubleshooting
• Backup configuration management
• Network-security policy management
• Remote-access troubleshooting
• Monitoring and alerting
• Vendor coordination and escalation
Server and operating-system support services include:
• Microsoft Windows Server administration
• Active Directory management
• Group Policy administration
• DNS and DHCP management
• File and print services
• User and permission management
• Server patch management
• Performance monitoring
• Storage and disk-capacity management
• Virtualization infrastructure administration
Datanetiix supports both virtualization platforms identified in the RFP, including:
• VMware ESX / VMware vSphere environments
• Microsoft Hyper-V environments
Virtualization support services include:
• Host monitoring
• Virtual machine provisioning
• Snapshot management
• Resource allocation and optimization
• Backup integration
• Disaster recovery support
Datanetiix Solutions Inc
Datanetiix Solutions Inc 23
Information Technology Services
City Of Livingston, CA
• Patch and firmware coordination
• High-availability monitoring
Support is provided through proactive monitoring systems, scheduled maintenance activities, documented operational procedures, and escalation to senior engineering personnel when required.

Our objective is to maintain secure, stable, and high-performing infrastructure systems that support the City’s operational and public-service requirements across all facilities and departments. c. Describe support you provide to end-users having problems with remote access to our systems.

Datanetiix provides comprehensive remote-access support services for users connecting to organizational systems from remote offices, field locations, mobile environments, and public-safety operations.

Support services are designed to ensure secure, reliable, and responsive connectivity for remote users accessing applications, email systems, network resources, and virtualized environments from desktops, laptops, tablets, smartphones, and mobile-data environments.

Remote-access technologies supported include:
• Microsoft Remote Desktop Services (RDS) / Terminal Services • VPN connectivity solutions
• Secure remote-access gateways
• Cloud-based remote-access platforms
• Multi-factor authentication systems
• Remote desktop and remote-support tools
• Mobile-device connectivity platforms
Support services include:
• VPN connectivity troubleshooting
• Authentication and MFA troubleshooting
• Remote-session performance troubleshooting
• Terminal Server / RDS support
• User-profile troubleshooting
• Remote printer and peripheral support
• Mobile-device access troubleshooting
• Cellular-connectivity troubleshooting
• Secure application-access troubleshooting
• Remote desktop client configuration
• Password-reset and account-unlock assistance
Datanetiix also supports mobile and field-based operational users, including personnel utilizing:
• Squad-car connectivity systems
• Mobile data terminals (MDTs)
• Cellular-enabled devices
• Tablets and smartphones
• Hybrid remote-work environments
Support requests are handled through centralized help desk operations with escalation to systems administrators, networking engineers, or security personnel when advanced troubleshooting or infrastructure-level remediation is required.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 24
Information Technology Services
City Of Livingston, CA
Remote-access systems are monitored and maintained as part of ongoing operational support and security-management activities to help ensure secure and reliable access to City resources. d. Describe your work order/ticket system.

Datanetiix utilizes a centralized Professional Services Automation (PSA) and ticket-management platform to manage service requests, incidents, escalation workflows, reporting, communication tracking, and operational-service delivery activities.

The ticketing system is designed to provide structured incident management, accountability, transparency, and measurable service delivery across all supported client environments.

Support requests may be initiated through multiple intake channels, including:
• Telephone support
• Email-based ticket submission
• Client self-service portal
• Automated monitoring alerts
• Remote-management system integrations
• Onsite technician escalation
Each ticket follows a documented lifecycle process that includes:
• Ticket intake and logging
• Initial triage and prioritization
• Assignment to the appropriate support tier
• Investigation and troubleshooting
• Escalation where necessary
• Resolution and validation
• Documentation and closure
Tickets are categorized and prioritized based on:
• Severity
• Business impact
• Affected users or systems
• Operational urgency
• Security implications
The system supports:
• SLA tracking and response monitoring
• Escalation management
• Time tracking
• Asset association
• Knowledge-base documentation
• Reporting and analytics
• Communication history retention
• Audit and operational review processes
Authorized City personnel may be provided visibility into ticket status, service history, reporting metrics, and ongoing operational activities through reporting dashboards or client-access portals, depending on the final service-delivery configuration.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 25
Information Technology Services
City Of Livingston, CA
The ticketing platform also integrates with monitoring and alerting systems to enable proactive identification and remediation of infrastructure and endpoint issues before they significantly impact operations.
e. Describe your system to escalate chronic or advanced problems.

Datanetiix maintains a structured multi-tier escalation framework designed to ensure that chronic, recurring, high-impact, or technically advanced issues are addressed promptly, systematically, and with appropriate technical oversight.

Support escalation follows a tiered operational model consisting of:
• Tier 1 Help Desk Support
• Tier 2 Systems Administration
• Tier 3 Senior Engineering and Infrastructure Specialists • Vendor or manufacturer escalation when required
Escalation triggers may include:
• Severity and operational impact
• Public-safety implications
• System outages
• Security incidents
• Extended time in queue
• Repeat or recurring incidents
• Failure of standard remediation procedures
• Infrastructure-wide impact
• Complex application or network failures
Chronic or recurring issues are formally reviewed through a root-cause analysis (RCA) process intended to identify:
• Underlying technical causes
• Environmental patterns
• Process deficiencies
• Capacity or performance constraints
• Security vulnerabilities
• Recommended corrective actions
Escalated incidents are tracked through the ticket-management platform with documented ownership, communication history, remediation actions, and executive visibility where appropriate.

For major incidents or recurring operational concerns, Datanetiix may involve:
• Senior infrastructure engineers
• Security specialists
• Service-delivery leadership
• Vendor escalation teams
• Executive management oversight
The escalation process is designed to ensure timely resolution, accountability, communication continuity, and long-term operational improvement while minimizing disruption to City services and end users.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 26
Information Technology Services
City Of Livingston, CA
f. Describe the hours of operation for the help desk staff and the guarantee call response time.

Datanetiix provides 24 hours per day, 7 days per week, 365 days per year help desk availability and infrastructure monitoring services to support client operational continuity, emergency response requirements, and critical-system availability.

Help desk and operational support services are available for:
• End-user support requests
• Infrastructure incidents
• Security events
• Remote-access issues
• Server and network alerts
• Emergency after-hours escalation
• Public-safety operational concerns
Support requests are prioritized according to severity, operational impact, affected systems, and business criticality.

Target response-time objectives are as follows:

Priority Level Example Impact Target Initial
Response Time
Critical / Severity 1 Major outage, public-safety impact, server/network outage, ransomware/security event
15 Minutes
(24x7x365)
High / Severity 2 Significant operational impairment affecting multiple users or departments
30 Minutes
Medium / Severity 3 Standard user-impacting issue with a workaround available
2 Hours
Low / Severity 4 General request, informational request, non-critical issue
4 Business Hours
Critical incidents are escalated immediately to senior technical personnel and management staff as necessary. Monitoring systems generate automated alerts for critical infrastructure conditions to support proactive incident identification and rapid response.

Datanetiix maintains operational procedures and on-call escalation structures designed to support continuity of service and timely response for municipal-government environments requiring reliable operational support beyond standard business hours.
g. Provide help desk statistics such as average time to respond to calls, average length of time for successful resolution of issues, the nature of the support calls, etc.

Datanetiix maintains operational reporting and service-performance tracking through its centralized PSA and service-management platform. Help desk performance metrics are reviewed regularly to monitor service quality, technician responsiveness, resolution efficiency, and client satisfaction across supported environments.

The following categories of operational metrics are routinely monitored and reported:
• Average initial response time
• Average issue-resolution time
• First-contact resolution rate
• Ticket volume trends
Datanetiix Solutions Inc
Datanetiix Solutions Inc 27
Information Technology Services
City Of Livingston, CA
• Escalation frequency
• Client satisfaction (CSAT) scores
• Reopened-ticket trends
• Incident categories and recurring issue patterns
Typical support-call categories include:
• Password resets and account-access requests
• Microsoft 365 and email support
• Desktop and laptop troubleshooting
• Printer and peripheral support
• Remote-access and VPN connectivity
• Application support and configuration issues
• Mobile-device support
• Network-connectivity troubleshooting
• Security and endpoint-protection alerts
• Hardware failures and replacement coordination
Datanetiix utilizes rolling operational reviews and reporting to identify:
• Recurring support trends
• Infrastructure weaknesses
• Training opportunities
• Capacity constraints
• Service-improvement opportunities
Verified 12-month operational statistics, including average response times, average resolution metrics, first-call resolution percentages, and client-satisfaction measurements, will be provided upon final validation by Operations Management prior to contract execution or final proposal submission. h. Describe availability of other key staff during normal business hours, including systems administrators and engineers with areas of expertise such as Terminal Server.

Datanetiix maintains a multi-tier technical-support structure consisting of systems administrators, infrastructure engineers, cybersecurity specialists, network engineers, cloud specialists, and escalation personnel available during standard business operations and through after-hours on-call procedures.

Key technical resources are available during standard Pacific Time business hours to support escalated incidents, infrastructure management, project implementation activities, operational planning, and specialized troubleshooting requirements.

Areas of technical specialization include:
• Microsoft Remote Desktop Services (RDS) / Terminal Server environments • Microsoft 365 and Exchange administration
• Windows Server infrastructure
• Active Directory and Group Policy management
• VMware vSphere / ESXi administration
• Microsoft Hyper-V virtualization
• Network infrastructure support (Cisco, Juniper, Ubiquiti) • Firewall and VPN administration
• Endpoint security and EDR platforms
• Backup and disaster recovery systems
Datanetiix Solutions Inc
Datanetiix Solutions Inc 28
Information Technology Services
City Of Livingston, CA
• Cloud and hybrid infrastructure support
• Mobile-device management
• Security and compliance operations
• SCADA-environment awareness and operational coordination Datanetiix utilizes a bench-depth approach to ensure that multiple qualified personnel are available across critical technology domains. This structure reduces operational dependency on individual technicians and improves continuity during vacations, emergencies, escalations, or concurrent incidents.

Support coverage is coordinated through:
• Tiered escalation procedures
• Shared engineering resources
• Scheduled availability rotations
• On-call escalation coverage
• Management oversight and dispatch coordination
For specialized infrastructure environments such as Terminal Server / RDS, virtualization, and publicsafety-related operational systems, incidents may be escalated directly to senior infrastructure engineers and security personnel with advanced platform expertise. i. Describe after-hours support. What is the guaranteed response time? How is your after-hours response time structured (e.g., time of day, severity)? What is the average response time? Datanetiix provides structured after-hours and emergency-response support services designed to maintain continuity of operations for critical infrastructure, municipal systems, public-safety operations, remote-access environments, and security-related incidents outside standard business hours.

Our after-hours support structure includes:
• 24x7x365 monitoring and alerting
• On-call primary support technicians
• Secondary backup escalation personnel
• Senior engineering escalation resources
• Management escalation procedures for critical incidents • Public-safety priority escalation handling
After-hours incidents are prioritized according to operational impact and severity. Critical outages involving servers, network infrastructure, remote-access systems, public-safety operations, cybersecurity incidents, or multi-user service disruptions receive immediate escalation and response.

Target after-hours response objectives are as follows:

Priority Level Example Incident Type Target Response
Time
Critical (Priority 1) Public-safety outage, server failure, ransomware/security event, network outage
15 Minutes
High (Priority 2) Major degradation affecting multiple users or departments
30 Minutes
Medium (Priority 3) Non-critical operational issue requiring afterhours attention2 Hours Low (Priority 4) Informational or non-urgent request Next Business Day Datanetiix Solutions Inc
Datanetiix Solutions Inc 29
Information Technology Services
City Of Livingston, CA
The after-hours process includes:
• Automated alert or user escalation
• On-call technician engagement
• Incident triage and severity validation
• Escalation to engineering or security resources if required • Client notification and status communication
• Resolution coordination and documentation
Public-safety and operationally critical systems receive elevated prioritization within the escalation framework to minimize service disruption and operational risk.

Average after-hours response metrics are monitored internally through the service-management platform and are reviewed as part of operational-governance and SLA-management procedures. Verified responseperformance statistics may be provided upon final operational review. j. Are there any penalties for your company if the guaranteed response times are not met? Datanetiix recognizes the importance of accountability, transparency, and measurable service delivery within managed-services engagements. Service-level performance is monitored through the centralized PSA and reporting platform, which tracks ticket response times, escalation timelines, resolution activities, and operational metrics.

Datanetiix is willing to work collaboratively with the City of Livingston to establish mutually agreedupon Service Level Agreements (SLAs), reporting procedures, escalation criteria, and service-credit methodologies appropriate for the City’s operational requirements and risk profile.

Potential SLA accountability measures may include:
• Monthly SLA-performance reporting
• Review of missed response or escalation targets
• Root-cause analysis for recurring SLA deviations
• Corrective-action planning
• Service-credit structures for repeated non-compliance, subject to negotiated contract terms Examples of measurable SLA categories may include:
• Initial response time
• Critical-incident escalation time
• System-availability objectives
• Monitoring and alerting response
• After-hours escalation performance
Any formal service-credit schedules, performance thresholds, exclusions, limitations, and applicable caps would be finalized during contract negotiations to ensure alignment with the agreed scope of services, staffing model, operational dependencies, and third-party vendor considerations.

Datanetiix believes that proactive communication, continuous monitoring, preventative maintenance, and operational governance are the most effective methods for minimizing SLA-impacting incidents and maintaining long-term service quality.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 30
Information Technology Services
City Of Livingston, CA
k. Describe the on-site support representative responsibilities and recommended schedule (hours per week/month).

Datanetiix provides on-site support services to supplement remote help desk, monitoring, and engineering operations for activities requiring physical presence, hands-on troubleshooting, infrastructure coordination, or direct user interaction.

The on-site support representative serves as the local operational extension of the broader Datanetiix support organization and coordinates closely with remote help desk personnel, systems administrators, network engineers, and project-management resources.

Typical on-site responsibilities include:
• Desktop and laptop deployment
• Hardware installation and replacement
• Workstation imaging and setup
• Peripheral installation and troubleshooting
• Physical connectivity troubleshooting
• Network and cabling coordination
• Conference-room and meeting-support assistance
• User onboarding and desk setup
• Inventory verification and asset tagging
• Physical walkthroughs and infrastructure inspections
• Coordination with vendors, carriers, and contractors
• Escalation support for infrastructure incidents
• Assistance during planned maintenance or project activities Datanetiix recommends a scheduled on-site support cadence consisting of:
• Recurring scheduled on-site presence (example: weekly or bi-weekly visits) • On-demand dispatch support for urgent operational requirements • Additional on-site coverage during projects, migrations, or infrastructure upgrades A typical municipal environment of the City’s size would generally benefit from:
• Approximately 8–16 hours of scheduled on-site support per week • Additional emergency or project-based on-site support as required The on-site representative coordinates directly with the remote support and engineering teams to ensure continuity of communication, escalation management, documentation updates, and rapid issue resolution.

Final staffing structure, scheduling frequency, and on-site resource allocation would be refined collaboratively during onboarding and operational-planning discussions based on the City’s support volume, departmental workflows, public-safety requirements, and infrastructure complexity. l. Describe specific help desk staff skill sets to support advanced issues with programs such as Terminal Server, Exchange, VMWare and applications support (e.g., operating system issues or MS Office issues).

Datanetiix maintains a tiered support structure with personnel possessing specialized expertise across Microsoft infrastructure, virtualization platforms, remote-access systems, networking, cybersecurity, and enterprise productivity environments.

Advanced support capabilities include expertise in:
• Microsoft Remote Desktop Services (RDS) / Terminal Server Datanetiix Solutions Inc
Datanetiix Solutions Inc 31
Information Technology Services
City Of Livingston, CA
• Microsoft Exchange and Microsoft 365
• VMware vSphere / ESXi
• Microsoft Hyper-V
• Active Directory and Group Policy
• Windows Server administration
• Endpoint management and patching
• Microsoft Office and Microsoft 365 application support • Email security and mail-flow troubleshooting
• VPN and remote-access troubleshooting
• File permissions and profile management
• Backup and recovery operations
• Endpoint security and EDR troubleshooting
Technical staff supporting these environments may hold certifications including:
• Microsoft Certified certifications
• VMware certifications
• CompTIA Network+
• CompTIA Security+
• Cisco certifications
• Microsoft Azure and Security certifications
Specialized escalation resources are available for:
• Virtualization-host failures
• RDS session-host performance issues
• Exchange and mail-flow troubleshooting
• Microsoft 365 identity and authentication issues
• Advanced application compatibility issues
• Infrastructure and storage performance troubleshooting • Security-event investigation and remediation
Datanetiix utilizes documented escalation paths and collaborative engineering workflows to ensure that advanced issues are rapidly assigned to personnel with appropriate platform specialization and operational experience.
m. Describe any training your organization provides to your clients, including network applications and/or desktop applications. (Or are you affiliated with an organization that provides training to clients?) Datanetiix provides user-training and technology-adoption support services designed to improve end-user productivity, strengthen cybersecurity awareness, reduce support incidents, and assist clients in effectively utilizing supported technologies and applications.

Training services may include:
• Microsoft 365 and Office application training
• Outlook and email best practices
• Teams collaboration training
• SharePoint and OneDrive usage guidance
• Security awareness and phishing-prevention training
• Password and multi-factor authentication education
• Remote-work and VPN usage training
• Device security and mobile-device guidance
• Administrative and technical staff training
Datanetiix Solutions Inc
Datanetiix Solutions Inc 32
Information Technology Services
City Of Livingston, CA
• Infrastructure and operational procedure walkthroughs Training delivery methods may include:
• Live virtual instructor-led sessions
• On-site classroom-style sessions
• One-on-one user training
• Recorded training materials
• User-reference documentation
• Security-awareness campaigns and simulated phishing exercises Datanetiix may also provide:
• New-user onboarding guidance
• Technology rollout orientation
• Change-management communication assistance
• Knowledge-transfer sessions for designated client personnel Training programs can be customized based on departmental workflows, user skill levels, application requirements, operational changes, or cybersecurity priorities.

Depending on the final scope of services, certain baseline end-user training activities may be included within the managed services agreement, while larger formal training initiatives or specialized workshops may be proposed as optional professional services.
n. Describe any systems-backup support you offer.

Datanetiix provides comprehensive backup-management and disaster-recovery support services designed to protect critical systems, applications, and organizational data from accidental deletion, hardware failure, ransomware, operational disruption, and disaster events.

Backup services may include:
• Backup-platform administration and monitoring
• Server and workstation backup management
• Virtual-machine backup support
• Cloud and hybrid backup coordination
• Backup-job monitoring and alerting
• Backup verification and validation
• Retention-policy management
• Restoration testing and recovery support
• Disaster-recovery coordination
• Backup reporting and compliance review
Datanetiix commonly supports enterprise backup platforms including:
• Veeam Backup & Replication
• Acronis Cyber Protect
Typical backup strategies may include:
• Hourly incremental backups for critical systems
• Daily full backups
• Local backup repositories for rapid restoration
• Off-site or cloud-replicated backup copies
• Long-term archival retention policies
Datanetiix Solutions Inc
Datanetiix Solutions Inc 33
Information Technology Services
City Of Livingston, CA
• Immutable or ransomware-protected backup options where applicable Retention schedules are typically customized based on operational, compliance, and recovery requirements, but may include:
• Short-term operational retention
• Monthly archival retention
• Annual compliance retention where required
Backup data is secured through:
• Encryption in transit
• Encryption at rest
• Access-control restrictions
• Monitoring and alerting systems
• Periodic backup-health validation
The City’s environment, including local and remote cloud-backup infrastructure, would be incorporated into centralized monitoring, reporting, and disaster-recovery governance processes to improve visibility, reliability, and recovery readiness across all supported systems. o. Describe any disaster recovery support provided.

Datanetiix provides disaster-recovery (DR) planning, implementation, monitoring, testing, and recoverycoordination services designed to support operational continuity for municipal-government environments and critical business systems. Our disaster-recovery approach incorporates documented recovery procedures, backup validation, infrastructure redundancy planning, and recovery-priority alignment based on operational criticality.

Disaster-recovery services may include:
• Disaster-recovery planning and documentation
• Recovery-priority classification by system tier
• Backup replication and failover coordination
• Recovery-runbook development and maintenance
• Infrastructure and application dependency mapping
• Annual disaster-recovery testing and validation
• Recovery orchestration and incident coordination
• Cloud and off-site recovery support
• Virtual-machine and server restoration services
• Ransomware-recovery procedures
• Post-incident review and remediation planning
Datanetiix supports disaster-recovery strategies for both on-premises and cloud-connected environments, including Hyper-V virtualization platforms, Microsoft 365 environments, file systems, network infrastructure, and critical municipal operational services. Recovery procedures are aligned with operational priorities and documented within formal DR runbooks maintained as part of the servicegovernance process.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 34
Information Technology Services
City Of Livingston, CA
Typical recovery objectives may include the following service tiers:

System Tier Example Systems Target RTO Target
RPO
Critical Systems Public safety, core network, authentication, critical servers, remote-access infrastructure
≤ 4 Hours ≤ 1 Hour
Business Operational
Systems
File services, email, virtualization hosts,
departmental applications
≤ 8 Hours ≤ 4 Hours
Standard Business
Systems
General productivity systems, non-critical
applications
≤ 24 Hours ≤ 24 Hours
Disaster-recovery planning includes identification of infrastructure dependencies, restoration sequencing, communication procedures, escalation workflows, and recovery validation processes to improve recovery consistency and reduce operational disruption during outage events.

Datanetiix also performs periodic disaster-recovery and backup-restoration testing to validate recovery readiness, backup integrity, and operational effectiveness of documented procedures. Test results, remediation recommendations, and improvement opportunities are incorporated into ongoing operationalgovernance and risk-management reviews.

Where appropriate, Datanetiix may additionally recommend enhanced resiliency measures such as immutable backups, secondary replication targets, cloud-based failover options, infrastructure redundancy improvements, and cybersecurity hardening controls to improve organizational recovery readiness and operational resilience
p. Describe how major software upgrades will be applied. Are there extra fees for upgrades? If so, please describe.

Datanetiix follows a structured change-management and upgrade-governance process designed to minimize operational disruption, maintain system stability, preserve security compliance, and ensure successful deployment of software and infrastructure upgrades within municipal-government environments.

Major software and infrastructure upgrades are managed through a phased lifecycle process that typically includes:
• Upgrade assessment and compatibility review
• Risk analysis and dependency validation
• Vendor and licensing verification
• Backup and recovery validation prior to implementation • Testing and staging procedures where applicable
• Change-control documentation and scheduling
• City review and approval prior to production implementation • Deployment coordination and execution
• Post-upgrade validation and monitoring
• Rollback planning and contingency procedures
Upgrade activities may include support for:
• Microsoft Windows Server updates and version upgrades • Microsoft 365 platform changes
• Hyper-V and virtualization-platform upgrades
• Firewall and network-infrastructure firmware updates
• Endpoint operating-system upgrades
Datanetiix Solutions Inc
Datanetiix Solutions Inc 35
Information Technology Services
City Of Livingston, CA
• Security-platform and EDR updates
• Backup-platform upgrades
• Line-of-business application updates
Routine maintenance updates, security patching, firmware updates, and standard software maintenance activities are generally included as part of the managed-services scope and monthly recurring service fees.

These activities are typically performed through scheduled maintenance windows and standard operational procedures.

Examples of services commonly included within the monthly managed-services agreement may include:
• Operating-system patch management
• Security updates and critical vulnerability remediation • Standard firmware updates
• Microsoft 365 administration updates
• Endpoint software maintenance
• Monitoring and validation activities
• Routine maintenance scheduling
Major upgrades, migrations, or large-scale infrastructure modernization projects may be proposed separately as project-based professional services depending on scope, complexity, downtime requirements, third-party dependencies, or operational impact. Examples may include:
• Server operating-system migrations
• Major Microsoft 365 tenant transformations
• Hyper-V host replacement or infrastructure refresh projects • Large-scale workstation refresh initiatives
• Network-core replacement projects
• Backup-platform replacement or redesign
• Security-platform migrations
• Disaster-recovery architecture redesign initiatives
Where project-based services are required, Datanetiix will provide:
• Scope documentation
• Project timelines
• Estimated labor requirements
• Change-impact analysis
• Risk considerations
• Cost estimates for City review and approval before execution All significant upgrade activities are coordinated with designated City stakeholders to ensure alignment with operational schedules, public-safety considerations, maintenance windows, and departmental requirements. Any optional or project-based upgrade fees would be clearly identified and aligned with the pricing structure outlined within Section 10. Optional Fees. q. Describe patch management – how software updates and patches are performed both on servers and desktops. Who is responsible doing updates? How often are they done? If using automated tools, what program is being used to rollout the updates and what programs are being updated? Datanetiix maintains a structured patch-management and vulnerability-remediation program designed to improve system stability, reduce cybersecurity risk, and maintain operational continuity across server, workstation, endpoint, and infrastructure environments. Patch management is performed through Datanetiix Solutions Inc
Datanetiix Solutions Inc 36
Information Technology Services
City Of Livingston, CA
centralized monitoring, automated deployment tools, change-management procedures, and operational validation processes.

Datanetiix technical personnel are responsible for the coordination, approval, deployment, monitoring, and validation of software updates and security patches across supported systems and devices. Patchmanagement activities are performed in alignment with operational priorities, maintenance windows, vendor guidance, and cybersecurity-risk considerations.

Datanetiix utilizes centralized Remote Monitoring and Management (RMM) and endpoint-management platforms including:
• ConnectWise RMM
• Microsoft Intune
• Microsoft Endpoint Management tools
• Native Microsoft update-management technologies where applicable Patch-management coverage may include:
• Microsoft Windows desktop operating systems
• Microsoft Windows Server operating systems
• Microsoft 365 and Office applications
• Third-party desktop applications
• Endpoint-security and antivirus platforms
• Hyper-V virtualization hosts
• Firmware and driver updates where applicable
• Network-device firmware and security updates
• Remote-access and VPN software
• Browsers and commonly deployed productivity applications Typical patch-management scheduling includes:

Patch Category Target Deployment Timeline
Critical Security Vulnerabilities Within 24–72 hours of validation High-Priority Security Updates Within 7 days
Standard Microsoft Patch Tuesday Updates Monthly scheduled deployment cycle Feature Updates / Non-Critical Enhancements Planned maintenance windows Emergency Out-of-Band Security Patches Expedited deployment based on severity Desktop and workstation patching is generally performed through automated deployment policies during approved maintenance windows to minimize user disruption. Servers and critical infrastructure systems follow a more controlled process involving:
• Patch validation and compatibility review
• Backup verification prior to deployment
• Maintenance-window scheduling
• Change-management coordination
• Post-update health checks and monitoring
• Rollback procedures if necessary
Critical production systems, public-safety infrastructure, and specialized applications may be subject to additional approval or testing requirements prior to deployment to reduce operational risk and ensure application compatibility.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 37
Information Technology Services
City Of Livingston, CA
Patch-management reporting and monitoring activities may include:
• Patch-compliance reporting
• Failed-update alerts and remediation tracking
• Vulnerability and missing-patch identification
• Endpoint update status dashboards
• Executive and operational reporting summaries
Datanetiix continuously monitors vendor advisories, cybersecurity alerts, and vulnerability notifications to prioritize remediation activities and respond to emerging security threats in a timely and controlled manner.
r. How are network down-times for maintenance scheduled and communicated? Datanetiix utilizes a formal change-management and maintenance-coordination process designed to minimize operational disruption, maintain service transparency, and ensure proper communication for planned and emergency maintenance activities affecting network infrastructure, servers, security systems, remote-access services, or business applications.

All planned maintenance activities follow a documented change-control workflow that typically includes:
• Change request creation and documentation
• Risk and impact assessment
• Dependency and service-impact review
• Maintenance-window scheduling
• Backup and rollback validation
• Internal technical review and approval
• Client notification and communication
• Post-maintenance validation and monitoring
Planned maintenance activities are generally scheduled during approved maintenance windows intended to minimize operational impact on City departments and public-safety operations. Typical maintenance windows may include:
• Evenings after standard business operations
• Weekends
• Sundays between 2:00 AM – 6:00 AM Pacific Time for higher-impact infrastructure maintenance where appropriate
Maintenance scheduling will be coordinated with designated City personnel to ensure alignment with operational requirements, Council activities, public-safety considerations, and departmental workflows.

Communication procedures for planned maintenance typically include:

Maintenance Type Notification Timeline
Standard Planned Maintenance Minimum 5–7 calendar days advance notice High-Impact Infrastructure
Maintenance
Minimum 7 calendar days advance notice
Emergency Security or Critical
Maintenance
As soon as operationally practical, typically within 24 hours or less
Datanetiix Solutions Inc
Datanetiix Solutions Inc 38
Information Technology Services
City Of Livingston, CA
Maintenance notifications may include:
• Description of planned activity
• Systems or services affected
• Expected maintenance duration
• Anticipated operational impact
• Recommended user actions if applicable
• Scheduled start and completion times
• Emergency contact and escalation information
Communication methods may include:
• Email notifications to designated City contacts
• Service-ticket and PSA platform notifications
• Help desk communication channels
• Direct coordination with department leadership where necessary • Status updates during extended maintenance events
Following completion of significant maintenance activities, Datanetiix may provide post-maintenance summaries including:
• Work completed
• Validation results
• Any observed issues or remediation actions
• Confirmation of restored services
• Follow-up recommendations if applicable
Emergency maintenance required to address critical security vulnerabilities, active threats, infrastructure instability, or operational outages may be expedited outside standard maintenance windows when necessary to protect City operations and security posture.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 39
Information Technology Services
City Of Livingston, CA

6. Monitoring
a. Describe your tools and strategies to monitor and ensure the stability of the computing environment.

Datanetiix utilizes a centralized monitoring and operational-management framework designed to provide continuous visibility into infrastructure health, cybersecurity conditions, endpoint status, network performance, backup integrity, and service availability across municipal and regulated environments. Our monitoring strategy is based on proactive operations management, automated alerting, layered security visibility, and rapid incident-response coordination to minimize downtime and operational disruption.

Datanetiix leverages a combination of Remote Monitoring and Management (RMM), endpoint-security, logging, alerting, and infrastructure-monitoring platforms to support 24x7x365 operational oversight.

Core monitoring and security platforms may include:

Monitoring Category Platform / Technology
Remote Monitoring & Management (RMM) ConnectWise RMM
Endpoint Detection & Response (EDR) Sophos Intercept X, Microsoft Defender, Seqrite Security Monitoring / Log Aggregation Microsoft Security tools, centralized event logging, SIEM-capable platforms
Backup Monitoring Veeam Backup & Replication, Acronis Cyber Protect
Endpoint & Mobile Device Management Microsoft Intune
Network & Infrastructure Monitoring Native monitoring tools, SNMP monitoring, firewall monitoring, switch monitoring
Microsoft 365 Monitoring Microsoft 365 Admin Center, security and health dashboards
Uptime & Availability Monitoring Public-service and infrastructure uptime monitoring tools
Monitoring coverage may include:
• Windows servers and Hyper-V virtualization hosts
• Desktop and laptop endpoints
• Microsoft 365 services and identity infrastructure
• Firewall, VPN, and network-device health
• Wireless infrastructure and internet connectivity
• Backup-job success and replication status
• Disk capacity, CPU, memory, and resource utilization
• Endpoint-security and antivirus status
• Patch-management compliance
• Remote-access infrastructure availability
• Critical service and application availability
• Public-facing systems and connectivity monitoring
Datanetiix utilizes threshold-based alerting and automated notification workflows to identify operational anomalies and initiate remediation procedures. Examples of monitored conditions may include:
• Server offline conditions
• Failed backup jobs
• Excessive CPU or memory utilization
• Low disk-space thresholds
Datanetiix Solutions Inc
Datanetiix Solutions Inc 40
Information Technology Services
City Of Livingston, CA
• Firewall or VPN outages
• Endpoint-security failures
• Critical patch failures
• Suspicious security activity or malware alerts
• Internet-service disruptions
• Hardware-health warnings
Where operationally appropriate, automated remediation procedures may be utilized for predefined conditions such as:
• Restarting failed services
• Automated patch deployment
• Endpoint policy enforcement
• Alert escalation workflows
• Backup-job retry procedures
• Scripted remediation for common operational issues
Security and operational alerts are prioritized according to severity, operational impact, and public-safety considerations. Critical alerts generate immediate escalation to designated support personnel and on-call engineering resources.

Datanetiix’s monitoring strategy is designed to provide the City of Livingston with proactive operational visibility, improved infrastructure reliability, faster incident detection, enhanced cybersecurity awareness, and continuous oversight of critical municipal technology systems. b. Describe how monitoring results will be communicated to the City.

Datanetiix utilizes a centralized monitoring and reporting framework designed to provide the City of Livingston with continuous visibility into infrastructure health, cybersecurity posture, operational performance, and service-delivery activities across all supported systems and locations. Monitoring results and operational metrics are communicated through a combination of automated alerts, scheduled reporting, service reviews, and escalation communications.

Communication and reporting methods include:
• Real-time monitoring alerts for critical infrastructure and security events • Weekly operational and system-monitoring reports
• Monthly service-review and operational-governance meetings • Ticketing-system reporting and service analytics
• Patch-management and update-status reporting
• Security-event and incident notifications
• Infrastructure-health and backup-status summaries
• Capacity and performance trend analysis
Datanetiix will provide designated City personnel with regular reporting covering:
• Server and infrastructure availability
• Endpoint and workstation monitoring status
• Backup success and failure notifications
• Patch-management compliance and update status
• Help desk activity and ticket-resolution metrics
• Security-alert activity and remediation status
• Network and connectivity performance summaries
Datanetiix Solutions Inc
Datanetiix Solutions Inc 41
Information Technology Services
City Of Livingston, CA
• Asset and operational-inventory updates
Consistent with the RFP requirements, Datanetiix will provide weekly reporting related to:
• System monitoring
• Help desk activities
• Software updates
• Patch-management activities
• Operational issues and remediation status
Critical and High-severity incidents will generate immediate escalation notifications to designated City contacts through approved communication channels such as:
• Email notifications
• Help desk ticket escalation
• Phone or SMS escalation for urgent incidents
• Scheduled management updates during active incidents
In addition to operational reporting, Datanetiix recommends conducting recurring monthly service-review meetings with City leadership and designated stakeholders to review:
• Service-level performance
• Open risks and recurring issues
• Security observations
• Infrastructure recommendations
• Project and lifecycle-planning activities
• Operational trends and improvement opportunities
This reporting and communication framework is intended to provide transparency, accountability, proactive operational oversight, and informed decision-making for City leadership while supporting continuity of operations across municipal and public-safety environments.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 42
Information Technology Services
City Of Livingston, CA

7. Management
a. Describe how you will report about status of systems, needs of users, needs for change, etc.

Datanetiix utilizes a structured governance, reporting, and service-management framework designed to provide the City of Livingston with continuous visibility into infrastructure health, operational performance, cybersecurity posture, end-user support trends, and technology-planning requirements. Our reporting model combines operational reporting, executive-level business reviews, and strategic planning discussions to support informed decision-making and proactive IT governance.

Reporting activities are organized into recurring operational and strategic review cycles, including:
• Weekly Operational Reporting
• Monthly Business Review (MBR) Meetings
• Quarterly Strategic / vCIO Planning Sessions
• Ad-hoc Incident and Escalation Communications
Weekly operational reports will be provided to designated City contacts and may include:
• System and infrastructure health status
• Help desk ticket activity and response metrics
• Patch-management and software-update status
• Backup and disaster-recovery monitoring summaries
• Security-alert and remediation activity
• Critical incident summaries and escalations
• Open-risk and operational-issue tracking
Monthly Business Review meetings will provide City leadership and operational stakeholders with:
• Service-level performance summaries
• Infrastructure uptime and availability reporting
• Mean Time to Respond (MTTR) and Mean Time to Resolution metrics • SLA attainment reporting
• Ticket-volume and recurring-issue analysis
• Patch-compliance and vulnerability-management status
• Backup-health and disaster-recovery readiness review
• Cybersecurity observations and operational-risk updates • Lifecycle-management and infrastructure recommendations • Project and operational initiative status updates
Quarterly strategic planning and vCIO-level reviews will focus on:
• Technology-roadmap planning
• Infrastructure modernization initiatives
• Budget forecasting and lifecycle planning
• Cybersecurity maturity and risk management
• Business-continuity and disaster-recovery planning
• Cloud and infrastructure optimization opportunities
• Operational-efficiency recommendations
• Compliance and regulatory considerations
Datanetiix Solutions Inc
Datanetiix Solutions Inc 43
Information Technology Services
City Of Livingston, CA
Key performance indicators (KPIs) tracked and reviewed may include:
• Infrastructure and system uptime
• SLA response and resolution compliance
• Mean Time to Respond (MTTR)
• Mean Time to Resolve
• First-contact resolution rate
• Client satisfaction (CSAT) measurements
• Help desk ticket volume and escalation trends
• Patch-management compliance percentages
• Backup-success and recovery metrics
• Security-event and vulnerability-remediation status
Reports and communications may be delivered through:
• Email reporting to designated City personnel
• Service-management and ticketing platform reports
• Virtual or on-site review meetings
• Dashboard and operational-summary reporting
• Real-time escalation notifications for critical incidents Datanetiix’s reporting and governance approach is designed to provide transparency, accountability, proactive operational oversight, and strategic technology guidance consistent with the City’s operational priorities, public-service obligations, cybersecurity requirements, and long-term infrastructure planning objectives.
b. Describe how you will propose changes in technicians assigned to the contract.

Datanetiix recognizes that personnel continuity is critical to maintaining operational consistency, preserving institutional knowledge, and sustaining effective working relationships within municipalgovernment environments. Our resource-management approach is designed to minimize unnecessary staffing changes while ensuring that qualified and appropriately trained personnel remain available to support the City of Livingston throughout the engagement.

For planned staffing changes involving key personnel assigned to the City’s account, Datanetiix will provide advance written notification to designated City representatives whenever reasonably possible.

Planned personnel transitions will typically include:
• Advance notification to the City (target: approximately 30 calendar days when feasible) • Identification of the proposed replacement resource
• Summary of the replacement resource’s qualifications, certifications, and relevant experience • Transition and knowledge-transfer planning
• Coordination meetings with City stakeholders as appropriate No reassignment of primary city-facing personnel will occur without internal management review and coordination with designated City contacts. Datanetiix will work collaboratively with the City to ensure continuity of service, operational stability, and minimal disruption during any staffing transition.

Transition activities may include:
• Knowledge-transfer sessions between outgoing and incoming personnel • Review of operational documentation and support procedures • Transfer of open-ticket and project responsibilities
• Review of infrastructure diagrams, escalation procedures, and environment-specific requirements Datanetiix Solutions Inc
Datanetiix Solutions Inc 44
Information Technology Services
City Of Livingston, CA
• Coordination of access-control updates and security authorization procedures Any replacement personnel assigned to support the City will possess qualifications and technical competencies appropriate to the role being filled, including applicable experience supporting municipal, public-sector, Microsoft infrastructure, virtualization, networking, cybersecurity, and operational-support environments.

Personnel supporting public-safety systems or CJIS-related environments will also be required to complete all applicable background investigations, fingerprinting procedures, CJIS Security Addendum requirements, and City-mandated compliance onboarding prior to receiving authorized access.

Datanetiix maintains cross-training, documentation standards, escalation procedures, and bench-depth staffing models to reduce dependency on individual personnel and ensure continuity of support services throughout the duration of the contract.
c. Describe any IT strategic planning provided.

Datanetiix provides strategic IT planning and virtual CIO (vCIO) advisory services designed to help municipal organizations align technology investments, cybersecurity initiatives, infrastructure modernization, and operational priorities with long-term business objectives and budget planning cycles.

Our strategic-planning approach is intended to support operational stability, risk reduction, lifecycle management, and sustainable technology growth across all City departments and facilities.

Strategic planning services may include:
• Annual technology-roadmap development
• Multi-year infrastructure and capital-improvement planning • Cybersecurity maturity and risk-assessment planning
• Business-continuity and disaster-recovery strategy development • Cloud and hybrid-infrastructure planning
• Lifecycle and refresh planning for servers, workstations, networking equipment, and software licensing
• Microsoft 365 and cloud-service optimization planning • Operational-efficiency and modernization recommendations • Budget forecasting and procurement planning assistance • Vendor and licensing-management guidance
Datanetiix works collaboratively with City leadership, department stakeholders, and operational personnel to develop strategic recommendations aligned with the City’s operational goals, cybersecurity requirements, compliance obligations, and fiscal planning timelines. Strategic planning activities are typically aligned with municipal budget-development cycles, including annual budgeting and capitalplanning processes associated with the City’s fiscal-year planning schedule.

Quarterly vCIO and strategic-review sessions may be conducted with City leadership to review:
• Infrastructure lifecycle status and refresh priorities • Cybersecurity risks and mitigation recommendations
• Technology modernization opportunities
• Operational and service-delivery trends
• Capital-project planning and budgeting considerations • Licensing and subscription renewals
• Disaster-recovery and operational-resilience readiness Datanetiix Solutions Inc
Datanetiix Solutions Inc 45
Information Technology Services
City Of Livingston, CA
• Grant-funding and public-sector technology funding opportunities Where applicable, Datanetiix may also assist the City in identifying technology initiatives that align with available public-sector funding opportunities, including cybersecurity, infrastructure-modernization, public-safety, and resiliency-focused grant programs.

Strategic recommendations are supported through operational reporting, asset and lifecycle analysis, infrastructure-health reviews, cybersecurity observations, and collaboration with City stakeholders to ensure that technology investments remain aligned with operational requirements, budget constraints, service-delivery expectations, and long-term municipal objectives.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 46
Information Technology Services
City Of Livingston, CA

8. Documentation, Record Keeping and Reporting
a. Describe your routine reporting procedures for information provided to the City.

Datanetiix maintains structured operational, technical, and strategic reporting procedures designed to provide the City of Livingston with continuous visibility into infrastructure health, service performance, cybersecurity posture, operational risks, and technology-planning activities. Reporting is delivered through a combination of automated monitoring platforms, service-management systems, scheduled operational reviews, and executive-level strategic meetings.

Reporting is organized into weekly, monthly, and quarterly deliverables aligned with the City’s operational and governance requirements.

Reporting
Cadence Report Type Typical Content
Weekly System Monitoring
Report
Server availability, infrastructure alerts, firewall status, backupjob results, endpoint-health monitoring, network-performance events
Weekly Help Desk Activity
Report
Ticket volume, response times, resolution statistics,
open/escalated tickets, recurring support trends
Weekly Software Update &
Patch Report
Patch-compliance status, critical-vulnerability remediation, pending updates, failed patch notifications
Weekly Security &
Operational Alerts
Summary
Security incidents, endpoint-detection alerts, failed-login trends, MFA-related events, operational anomalies
Monthly Operational
Scorecard / SLA
Report
SLA attainment, uptime metrics, MTTR (Mean Time to
Resolution), response-time performance, ticket-category analysis
Monthly Executive Service
Review
Infrastructure health summary, operational risks, recurring issues, lifecycle observations, service recommendations Quarterly Strategic
Technology Review
Infrastructure roadmap planning, budgeting considerations, cybersecurity recommendations, lifecycle and refresh planning, operational-improvement initiatives
Reports may include key performance indicators (KPIs) such as:
• Infrastructure and service uptime
• Help desk response and resolution metrics
• Mean Time to Resolution (MTTR)
• SLA compliance measurements
• Ticket volume and escalation trends
• Patch-management compliance
• Backup and recovery success rates
• Endpoint-security and vulnerability status
• User-support trends and recurring issue analysis
• Capacity and lifecycle planning observations
Routine reporting is typically delivered to designated City stakeholders through:
• Email distribution to authorized City contacts
• Scheduled operational-review meetings
• Monthly and quarterly leadership-review sessions
Datanetiix Solutions Inc
Datanetiix Solutions Inc 47
Information Technology Services
City Of Livingston, CA
• Service-management and ticketing platforms
• Shared dashboards and monitoring summaries where applicable Critical operational or security-related incidents are communicated in real time to designated City personnel through established escalation and notification procedures.

Datanetiix maintains documentation and reporting standards intended to ensure transparency, operational accountability, continuity of knowledge, and informed technology decision-making throughout the engagement lifecycle.
b. Describe how you will document and record maintenance, installation, performance and changes to the system.

Datanetiix maintains structured documentation, configuration-management, and change-record procedures designed to ensure operational continuity, auditability, knowledge retention, and long-term maintainability of client environments. Documentation standards are aligned with managed services and IT service-management best practices to provide accurate and current records of infrastructure, support activities, maintenance operations, and system changes.

Documentation and record-management activities include:
• Infrastructure and asset documentation
• Server and workstation inventory records
• Network diagrams and topology mapping
• Firewall and VPN configuration documentation
• IP-address management records
• Virtualization and storage documentation
• Backup and disaster-recovery configuration records
• Microsoft 365 and cloud-service configuration documentation • License and subscription inventory tracking
• Vendor and support-contract documentation
• Operational runbooks and support procedures
• Change-management and maintenance records
• Security and access-control documentation
Datanetiix maintains centralized documentation repositories and configuration-management records using secured service-management and documentation platforms. Where appropriate, a Configuration Management Database (CMDB) is maintained to track:
• Hardware assets
• Software assets
• Configuration dependencies
• Infrastructure relationships
• Lifecycle and warranty information
• Licensing and subscription status
All maintenance activities, installations, upgrades, patching operations, and infrastructure modifications are documented through formal ticketing and change-management procedures. Change records typically include:
• Description of the change
• Systems and services impacted
• Risk and impact assessment
• Scheduled maintenance window
Datanetiix Solutions Inc
Datanetiix Solutions Inc 48
Information Technology Services
City Of Livingston, CA
• Approval and authorization records
• Implementation procedures
• Rollback procedures
• Validation and post-change testing results
• Final completion notes
Datanetiix follows ITIL-aligned operational and change-management practices to reduce operational risk and improve consistency during maintenance and upgrade activities.

Documentation is reviewed and updated regularly as part of operational governance, project implementation activities, infrastructure modifications, and periodic environment reviews to ensure continued accuracy.

Access to documentation repositories is restricted through role-based access controls, multi-factor authentication (MFA), and audit-tracking procedures to protect sensitive infrastructure and security information.

Upon request, the City of Livingston will have access to applicable operational documentation, network diagrams, asset inventories, maintenance records, and configuration information maintained as part of the engagement. Datanetiix recognizes that all client-specific documentation and operational records remain the property of the City and will be maintained in a transferable and vendor-neutral format throughout the contract lifecycle.
c. Describe the documentation that you will make available to the City at the end of the contract period to assist with transition, if necessary.

Datanetiix recognizes the importance of maintaining complete, accurate, and transferable documentation throughout the engagement lifecycle to support operational continuity and reduce transition risk. In the event of contract expiration, termination, or transition to another provider, Datanetiix will cooperate fully with the City of Livingston to facilitate an orderly and professional transition process.

As part of the transition and knowledge-transfer process, Datanetiix will provide the City with a comprehensive transition documentation package that may include:
• Network diagrams and topology documentation
• Server and infrastructure configuration documentation • Firewall, VPN, and network-device configuration backups • Virtualization and storage configuration records
• Microsoft 365 and cloud-service configuration documentation • Backup and disaster-recovery configuration details
• Backup-job status and recent restoration-test reports • Asset inventory and hardware lifecycle records
• Software licensing and subscription inventory
• Warranty and support-contract information
• Vendor and carrier contact lists
• Administrative and operational runbooks
• Standard operating procedures and escalation workflows • Help desk and support-process documentation
• Open and standing support-ticket summaries
• Security-policy and access-control documentation
• Recent patch-management and maintenance records
• Security assessment, vulnerability, and audit summaries where applicable Datanetiix Solutions Inc
Datanetiix Solutions Inc 49
Information Technology Services
City Of Livingston, CA
Where authorized and contractually appropriate, administrative credential repositories and password-vault information will be securely transferred to designated City personnel or an authorized successor provider using approved secure-transfer procedures.

Datanetiix maintains documentation in structured, vendor-neutral formats intended to support continuity regardless of future technology-support arrangements. All City-specific operational documentation, configuration records, inventories, and support materials developed during the engagement remain the property of the City of Livingston.

Datanetiix does not require additional licensing, retention, or release fees for standard transition documentation associated with the managed-services engagement. Reasonable transition-assistance activities, knowledge-transfer coordination, and operational handoff support will be provided in accordance with the final contract terms and transition schedule.

Our objective is to ensure that the City retains full ownership, visibility, and operational continuity of its technology environment at all times, including during any future transition scenario.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 62
Information Technology Services
City Of Livingston, CA

11. Transition
Describe the steps needed to onboard with your company.

Datanetiix utilizes a structured, phased onboarding and transition methodology designed to ensure a seamless transfer of operational responsibility with minimal disruption to City services, end users, publicsafety operations, and critical infrastructure. Our transition approach is designed specifically for municipal-government environments requiring operational continuity, security compliance, documentation accuracy, and coordinated stakeholder communication.

The onboarding process is typically completed within approximately 60–90 days depending on infrastructure complexity, incumbent-provider cooperation, scheduling requirements, and CJIS-related onboarding procedures for personnel supporting public-safety systems.

Phase 1 — Project Initiation & Mobilization (Week 1)
Activities Deliverables Datanetiix
Responsibilities
City
Responsibilities
Executive kickoff
meeting, onboarding
coordination,
communication planning,
escalation review,
onboarding schedule
creation
Project kickoff
documentation,
onboarding schedule,
communication matrix,
escalation procedures
Assign onboarding
team, establish project
governance, initiate
onboarding
coordination
Designate City
stakeholders and
primary points of
contact
Phase 2 — Discovery & Environment Assessment (Weeks 1–3) Activities Deliverables Datanetiix
Responsibilities City Responsibilities
Infrastructure discovery,
asset review, server
assessment, firewall/network
review, Microsoft 365
assessment, backup review,
security review,
documentation collection
Preliminary
infrastructure
assessment, asset
inventory, risk
observations,
environment
documentation
Conduct technical
discovery and
operational
assessment activities
Provide access to
systems,
documentation,
licensing records, and
vendor contacts
Discovery activities may include review of:
• Hyper-V virtualization infrastructure
• WatchGuard firewalls and VPN configurations
• Microsoft 365 environment and identity management
• Backup and cloud-recovery systems
• JAMF-managed Apple mobile-device environment
• Network infrastructure across all City locations
• Public-safety and CJIS-related systems requiring compliance controls Datanetiix Solutions Inc
Datanetiix Solutions Inc 63
Information Technology Services
City Of Livingston, CA
Phase 3 — Tool Deployment & Monitoring Integration (Weeks 2–5) Activities Deliverables Datanetiix
Responsibilities
City
Responsibilities
Deployment of monitoring
agents, RMM integration,
endpoint-security
onboarding, patchmanagement integration,
alerting configuration
Monitoring dashboards,
alerting integration,
patch-management
configuration, endpointmanagement enrollment
Deploy and validate
operationalmanagement tools
Approve deployment
scheduling and
maintenance
windows
Deployment activities may include:
• RMM platform deployment
• Endpoint protection and EDR onboarding
• Backup monitoring integration
• Asset-management and reporting integration
• Alert escalation configuration
• Help desk and ticketing integration
Phase 4 — Knowledge Transfer & Incumbent Coordination (Weeks 3–6) Activities Deliverables Datanetiix
Responsibilities City Responsibilities
Transition meetings,
credential transfer,
operational review,
support-process review,
vendor coordination
Updated documentation
repository, credentialvalidation checklist,
transition status reports
Coordinate
knowledge
transfer and
validate
operational
readiness
Facilitate incumbentprovider
communication and
transition coordination
Knowledge-transfer activities include:
• Administrative credential validation
• Review of open issues and recurring operational concerns • Review of backup and recovery procedures
• Vendor and carrier coordination
• Review of escalation and support workflows
• Verification of licensing and warranty records
Phase 5 — Operational Cutover & Go-Live (Weeks 5–8)
Activities Deliverables Datanetiix
Responsibilities City Responsibilities
Service-transition
activation, help desk
cutover, monitoring
validation, escalation
activation, reporting
initiation
Active managed-services
operations, SLA tracking,
monitoring validation
reports
Assume
operational
support
responsibilities
and validate
service delivery
Communicate
operational changes
internally to City users
if necessary
Datanetiix Solutions Inc
Datanetiix Solutions Inc 64
Information Technology Services
City Of Livingston, CA
Operational cutovers include:
• Activation of 24x7x365 monitoring and support services • Ticket-routing transition
• Escalation-management activation
• After-hours support enablement
• Reporting and communication activation
Phase 6 — Hypercare & Stabilization (First 30 Days After Go-Live) Activities Deliverables Datanetiix
Responsibilities
City
Responsibilities
Enhanced monitoring, issue
stabilization, operational
optimization, reporting
review, service-adjustment
coordination
Hypercare status
reports, remediation
tracking, operational
recommendations
Provide elevated
support oversight
and rapid issue
response
Participate in
review meetings
and operational
feedback sessions
The Hypercare phase is designed to:
• Rapidly address transition-related issues
• Fine-tune escalation procedures
• Validate monitoring and backup operations
• Optimize operational workflows
• Confirm documentation completeness
• Improve end-user experience and support responsiveness CJIS & Public-Safety Compliance Considerations
Personnel requiring access to CJIS-related or public-safety systems will complete all applicable onboarding and compliance procedures, including:
• Criminal-history background checks
• Fingerprinting requirements
• CJIS Security Awareness training
• Execution of CJIS Security Addendum documentation
• City-specific access authorization procedures
Datanetiix recognizes that CJIS onboarding timelines may affect access scheduling for Police Department-related systems and will coordinate closely with the City to minimize operational impact while maintaining compliance requirements.

Throughout the transition process, Datanetiix maintains regular communication with designated City stakeholders through scheduled status meetings, onboarding reports, risk reviews, and milestone updates to ensure transparency, accountability, and operational continuity across all City locations and departments.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 65
Information Technology Services
City Of Livingston, CA

12. Miscellaneous
a. Provide any other certifications, credentials and licenses you think are relevant for our consideration (specify if held by the company or an employee).

Datanetiix maintains a combination of organizational certifications, regulatory registrations, strategic technology partnerships, and professionally certified technical personnel to support the delivery of secure, compliant, and enterprise-grade IT services for municipal, public-sector, and regulated environments.

The following certifications, credentials, and licenses are relevant to the services proposed for the City of Livingston:

Certification / Credential Held By
ISO 9001:2015 — Quality Management System Company
ISO 27001:2013 — Information Security Management System (ISMS) Company CMMC Level 2 Alignment / Readiness Company
Microsoft Partner Company
U.S. Department of Commerce Data Privacy Framework Participation / Alignment Company California Department of General Services (DGS) Small Business Certification Company NMSDC Minority Business Enterprise (MBE) Certification Company WBENC Women’s Business Enterprise (WBE) Certification Company Women-Owned Small Business (WOSB) Certification Company Microsoft Certified Professional Certifications Employees Microsoft Azure Certifications Employees
Microsoft 365 Certifications Employees
Datanetiix continuously invests in technical training, certification development, operational governance, cybersecurity readiness, and compliance alignment to ensure that both organizational capabilities and technical personnel remain aligned with evolving technology, security, and regulatory requirements.

These certifications and credentials support Datanetiix’s ability to provide secure infrastructure management, cybersecurity operations, cloud services, disaster recovery, compliance-oriented support, and operational governance appropriate for municipal-government and public-sector environments. b. Describe what makes your company unique in its ability to support the City’s IT initiatives and infrastructure.

Datanetiix believes its ability to support the City of Livingston’s IT initiatives and operational requirements is differentiated by a combination of municipal-focused service delivery, security-oriented operational governance, multi-site infrastructure expertise, and executive-level strategic engagement.

Key differentiators include:
➢ Municipal-Government and Multi-Site Operational Experience Datanetiix supports organizations operating across distributed environments requiring centralized management, operational continuity, secure remote access, infrastructure standardization, and coordinated support across multiple facilities. The City of Livingston’s environment, including City Hall, Police Department, Public Works, WWTP, and remote operational locations requires a support model capable of managing geographically distributed infrastructure while maintaining consistent operational visibility and rapid response capabilities.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 66
Information Technology Services
City Of Livingston, CA
Our operational model is designed to support:
• Multi-site infrastructure management
• Remote and on-site operational coordination
• Public-sector operational workflows
• Infrastructure lifecycle planning
• Cross-department technology standardization
• Continuous monitoring and centralized reporting
➢ CJIS-Aware Security and Public-Safety Support Readiness The City’s environment includes public-safety operations, CJIS-related access requirements, remoteaccess systems, endpoint-security obligations, and operational-security considerations that require a provider capable of operating within security-sensitive environments.

Datanetiix maintains operational procedures aligned with:
• CJIS security-awareness requirements
• Role-based access control and auditability
• Multi-factor authentication enforcement
• Endpoint protection and EDR monitoring
• Security incident escalation procedures
• Background-check and fingerprinting compliance processes • Secure remote-access governance
Our layered-security approach is designed to support municipal and public-sector environments where operational continuity and security governance are equally critical. ➢ Integrated Infrastructure, Cloud, Security, and Operational Support Unlike providers focused only on help desk operations or isolated infrastructure management, Datanetiix delivers an integrated support model covering:
• Microsoft 365 and cloud services
• Hyper-V and virtualization management
• Network and firewall administration
• Endpoint security and monitoring
• Backup and disaster recovery
• Mobile-device management
• Infrastructure documentation and reporting
• Strategic technology planning
This integrated approach allows the City to work with a single accountable technology partner capable of coordinating operational support, vendor management, cybersecurity oversight, infrastructure modernization, and lifecycle planning across all departments and systems. ➢ Executive-Level Engagement and Strategic IT Governance Datanetiix provides executive oversight and vCIO-style strategic engagement in addition to day-to-day operational support. The City will have access to senior leadership, account-management resources, and engineering personnel responsible for aligning technology operations with budget planning, infrastructure lifecycle management, cybersecurity priorities, operational continuity, and future modernization initiatives.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 67
Information Technology Services
City Of Livingston, CA
Strategic services include:
• Quarterly technology reviews
• Budget and lifecycle planning assistance
• Infrastructure risk identification
• Cybersecurity posture recommendations
• Disaster-recovery and continuity planning
• Vendor and licensing coordination
• Long-term infrastructure roadmap development
This governance-focused approach enables the City to receive both operational IT support and strategic technology guidance appropriate for a growing municipal-government environment.

California Public-Sector and Compliance Alignment
Datanetiix’s operational structure, compliance-oriented service-delivery model, and public-sector awareness position the company to effectively support California municipalities requiring responsive service, regulatory awareness, transparent operational reporting, and accountable technology governance.

Our certifications, compliance programs, security controls, and operational processes are designed to support the reliability, accountability, and security expectations commonly required within municipalgovernment environments. c. How many employees hold a current CJIS Security Certificate? Datanetiix currently maintains personnel with security-awareness and compliance-training experience relevant to regulated and public-sector environments. The exact number of employees currently holding active CJIS Security Certificates and/or completed CJIS Security Awareness Training records is being validated internally through Human Resources and Compliance Management to ensure accuracy and alignment with current certification status.

Personnel proposed for the City of Livingston engagement who may require access to CJIS-related systems, public-safety infrastructure, or law-enforcement environments will complete all required CJIS onboarding and compliance procedures prior to receiving authorized access, including:
• CJIS Security Awareness Training
• Criminal-history background checks
• Fingerprinting requirements
• Execution of CJIS Security Addendum documentation
• Any City-specific security or access-control requirements Datanetiix recognizes the importance of CJIS compliance within municipal and public-safety environments and is fully prepared to align assigned personnel with the City of Livingston Police Department’s onboarding and compliance procedures as part of the transition and onboarding process.

Verified CJIS-certified personnel counts can be provided upon final confirmation by Human Resources and Compliance Management prior to contract execution or service onboarding. d. Describe your company’s familiarity with the CJIS Security Policy.

Datanetiix maintains familiarity with the FBI Criminal Justice Information Services (CJIS) Security Policy and understands the operational, administrative, and technical safeguards required to support environments containing criminal justice information, law-enforcement systems, and public-safety infrastructure.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 68
Information Technology Services
City Of Livingston, CA
Our operational-security practices incorporate principles aligned with key CJIS Security Policy domains, including:
• Access control and least-privilege administration
• Multi-factor authentication (MFA) enforcement
• Audit logging and accountability
• Configuration and change management
• Personnel security and background-screening procedures • Endpoint and media protection
• Secure remote-access controls
• Incident-response procedures
• Physical and environmental security awareness
• Data protection and encryption practices
• Security-awareness and operational-compliance training Datanetiix also understands the importance of:
• Unique user identification and audit traceability
• Controlled administrative access
• Secure transmission of sensitive information
• Timely patch management and vulnerability remediation • Logging and monitoring of privileged activities
• Formal onboarding and offboarding procedures
• CJIS Security Addendum execution requirements
Personnel supporting CJIS-related environments are required to comply with all applicable backgroundscreening, fingerprinting, confidentiality, and security-awareness requirements established by the client agency and governing CJIS standards.

Datanetiix’s internal operational controls and governance frameworks are aligned with broader security and compliance standards, including:
• ISO 27001 information-security management principles
• CMMC-aligned cybersecurity practices
• Role-based access-control governance
• Security-event monitoring and escalation procedures
• Formalized change-management and documentation processes These operational controls support secure management of infrastructure, identities, endpoints, and administrative access within regulated and security-sensitive environments.

Datanetiix also has experience supporting organizations operating within highly regulated and securityconscious environments, including public-sector, tribal-government, and compliance-sensitive organizations where operational security, controlled access, auditability, and continuity of service are critical requirements.

Our onboarding methodology for CJIS-related environments includes coordination with the client agency regarding:
• CJIS Security Addendum execution
• Personnel background checks and fingerprinting
• Access authorization procedures
• Security-awareness training requirements
• Administrative-access approval workflows
Datanetiix Solutions Inc
Datanetiix Solutions Inc 69
Information Technology Services
City Of Livingston, CA
• Documentation and audit-readiness procedures
Datanetiix recognizes the heightened operational and security responsibilities associated with publicsafety environments and is prepared to align service delivery procedures with the City of Livingston Police Department’s CJIS compliance requirements and operational-security expectations. e. Describe your organization’s technology stack, ranging from BDR/RMM/PSA to Endpoint Protection and secure email gateways.

Datanetiix utilizes a layered and integrated technology stack designed to support managed IT operations, cybersecurity monitoring, endpoint protection, backup and disaster recovery, identity management, remote monitoring, and secure service delivery across municipal, enterprise, and regulated environments.

Our operational platform strategy is designed to provide centralized visibility, proactive monitoring, secure remote management, operational reporting, and rapid incident response across client environments.

The following platforms and technology categories are utilized within Datanetiix operational and managed-services environments:

Technology Category Platforms / Solutions Utilized
Backup & Disaster Recovery (BDR) Veeam Backup & Replication, Acronis Cyber Protect
Remote Monitoring & Management (RMM) ConnectWise RMM, Datto RMM PSA / Service Management / Ticketing ConnectWise Manage Endpoint Detection & Response (EDR) /
Endpoint Protection
Sophos Intercept X, Microsoft Defender for
Endpoint, Seqrite Endpoint Security
Security Information & Event Management
(SIEM) / Security Monitoring
Microsoft Sentinel, centralized log monitoring
and alert-management platforms
Secure Email Gateway / Email Security Mimecast, Proofpoint, Microsoft Defender for Office 365
Identity & Access Management (IAM) Microsoft Entra ID (Azure Active Directory) Multi-Factor Authentication (MFA) Microsoft Authenticator, Conditional Access, hardware authentication tokens where required
Mobile Device Management (MDM/UEM) Microsoft Intune, JAMF (Apple environments) Virtualization Platforms Microsoft Hyper-V, VMware vSphere / ESXi Firewall & Network Security Platforms Sophos, Cisco, Juniper, WatchGuard Remote Access & VPN Platforms Microsoft Always On VPN, secure VPN platforms supported by client environments
Cloud Platforms Microsoft Azure, Amazon Web Services (AWS) Collaboration & Productivity Platforms Microsoft 365, Microsoft Teams, SharePoint Online, OneDrive
Documentation & Knowledge Management Secure internal documentation repositories and configuration-management systems
Patch Management & Software Deployment Integrated RMM-based patch-management and software-deployment systems
Asset & Inventory Management PSA-integrated asset-management and lifecycletracking systems Datanetiix continuously evaluates and enhances its operational technology stack to align with evolving cybersecurity threats, operational requirements, compliance obligations, and industry best practices.

Datanetiix Solutions Inc
Datanetiix Solutions Inc 70
Information Technology Services
City Of Livingston, CA
Platform selection and deployment may vary based on client-specific operational requirements, compliance obligations, infrastructure standards, cybersecurity objectives, and budget considerations.

Equivalent or client-standardized technologies can also be incorporated into the support model where operationally appropriate.
f. What does your incident response look like for a security event? Security Incident Response
Datanetiix maintains a structured Incident Response (IR) program aligned with the principles of the NIST SP 800-61 Computer Security Incident Handling Guide. Our incident-response methodology is designed to support rapid detection, containment, remediation, recovery, and post-incident analysis for municipalgovernment and regulated environments.

Our incident-response lifecycle includes the following phases:

Incident Response
Phase Activities
Preparation Security-policy enforcement, endpoint protection deployment, MFA enforcement, backup validation, security-awareness training, logging enablement, incident-response playbook development, and escalation planning
Detection & Analysis Continuous monitoring through RMM, EDR, SIEM, firewall alerts, threatintelligence feeds, anomaly detection, user reports, and automated security notifications
Containment Isolation of affected endpoints or systems, disabling compromised accounts, blocking malicious traffic, network segmentation, and implementation of temporary compensating controls
Eradication Malware removal, credential resets, vulnerability remediation, patch deployment, persistence removal, forensic validation, and security-control hardening
Recovery System restoration from validated backups, operational testing, service restoration, monitoring for reinfection, and phased return to production operations
Post-Incident Review Root-cause analysis, lessons-learned review, remediation recommendations, documentation updates, and improvement of security controls and operational procedures
Datanetiix maintains documented escalation procedures and incident-response playbooks for common cybersecurity scenarios, including:
• Ransomware incidents
• Business email compromise (BEC)
• Account compromise and unauthorized access
• Malware or endpoint infection
• Data-exfiltration attempts
• Denial-of-service or service disruption events
• VPN and remote-access compromise
• Privileged-account misuse
• Phishing and credential-harvesting attacks
Security incidents are prioritized according to operational impact, affected systems, public-safety implications, and data sensitivity. Critical security incidents involving operational disruption, ransomware Datanetiix Solutions Inc
Datanetiix Solutions Inc 71
Information Technology Services
City Of Livingston, CA
activity, or suspected unauthorized access are escalated immediately to senior engineering and security personnel.

Target security-response objectives include:

Severity Level Example Incident Target Initial Response Critical / Severity 1 Ransomware, active compromise, major outage, public-safety impact
15 Minutes (24x7x365)
High / Severity 2 Suspicious activity affecting multiple users or systems
30 Minutes
Medium / Severity 3 Isolated endpoint infection or suspicious event 2 Hours Low / Severity 4 Informational alert or low-risk advisory Next Business Day Datanetiix coordinates closely with designated City personnel throughout the incident lifecycle and provides ongoing communication regarding containment actions, operational impact, remediation progress, and recovery status. Incident documentation, remediation records, and post-incident summaries are maintained within the service-management platform for auditability and operational review.

Where required, Datanetiix may also coordinate with third-party forensic specialists, cybersecurity vendors, cyber-insurance providers, legal counsel, or law-enforcement agencies during significant security events requiring advanced forensic analysis or regulatory coordination.

Our incident-response strategy is designed to minimize operational disruption, protect sensitive municipal data, support regulatory and CJIS-aligned requirements, and restore critical City services as rapidly and securely as possible.
g. Have any of your clients experienced a Ransomware attack in the last 12 months? If so, how did your company respond.

Datanetiix has supported clients through cybersecurity incidents, including ransomware-related events, using established incident-response procedures designed to minimize operational disruption, contain threats rapidly, and restore business operations securely. To protect client confidentiality and security, specific client identities and sensitive operational details are not disclosed.

In the event of a suspected or confirmed ransomware incident, Datanetiix follows a structured incidentresponse methodology aligned with NIST incident-response principles and industry best practices.

Response activities may include:
• Immediate isolation of affected systems and endpoints • Disabling compromised accounts and restricting lateral movement • Activation of incident-response escalation procedures • Security-event analysis and threat validation
• Coordination with client leadership and designated stakeholders • Preservation of logs and forensic evidence where applicable • Engagement with cybersecurity vendors and forensic specialists as needed • Restoration of systems and data from validated backup repositories • Verification of backup integrity prior to recovery operations • Post-incident remediation and security hardening
Typical containment measures include:
• Endpoint isolation using EDR tooling
• Firewall rule updates and network segmentation
Datanetiix Solutions Inc
Datanetiix Solutions Inc 72
Information Technology Services
City Of Livingston, CA
• Forced credential resets and MFA validation
• Blocking malicious IP addresses, domains, or indicators of compromise • Temporary restriction of remote-access services where necessary Recovery operations are prioritized based on operational criticality, with emphasis placed on restoring core infrastructure, communications systems, identity services, and business-critical applications as rapidly as possible. Backup and disaster-recovery procedures are utilized to support secure restoration while minimizing data loss and operational downtime.

Following incident recovery, Datanetiix performs post-incident review and remediation activities that may include:
• Root-cause analysis
• Patch and vulnerability remediation
• Security-policy enhancements
• Additional endpoint protections
• User-security awareness reinforcement
• Backup and disaster-recovery validation
• Monitoring-rule and alerting improvements
• Recommendations for long-term security improvements
Datanetiix continuously evaluates lessons learned from security events to strengthen operational-security controls, improve incident-response readiness, and enhance resilience against evolving ransomware threats and cybersecurity risks.
h. Describe your organization’s backup validation strategy.

Datanetiix maintains a structured backup-validation and recovery-assurance program designed to ensure backup integrity, recovery reliability, and operational readiness for municipal-government and regulated environments. Our validation strategy is based on the principle that backups are only effective if they can be successfully restored and verified within required recovery objectives.

Backup-validation activities include automated monitoring, integrity verification, periodic restore testing, and documented recovery procedures across both local and cloud-based backup environments.

Key components of the backup-validation strategy include:
• Automated backup-job monitoring and alerting
• Daily backup-success verification
• Backup-integrity validation and checksum verification where supported • Sentinel-file and sample-data validation testing
• Scheduled test restorations of selected systems and files • Verification of backup replication to off-site or cloud repositories • Monitoring of backup storage capacity and retention compliance • Review of failed or warning-status backup jobs
• Escalation procedures for backup anomalies or missed jobs Datanetiix performs routine restore-validation testing to confirm recoverability of backup data and system images. Validation procedures may include:

Validation Activity Typical Frequency
Automated backup-job verification Daily
Sample file/folder restore testing Daily or Weekly
Critical system restore validation Monthly
Datanetiix Solutions Inc
Datanetiix Solutions Inc 73
Information Technology Services
City Of Livingston, CA
Validation Activity Typical Frequency
Full disaster-recovery simulation/testing Annually or as scheduled Backup retention and replication review Monthly
For critical infrastructure systems, monthly restore drills may include:
• Virtual machine recovery testing
• File-level restoration validation
• Application-consistency verification
• Active Directory recovery testing
• Database restore verification where applicable
• Recovery-time measurement against RTO/RPO targets
To improve ransomware resilience and reduce the risk of backup compromise, Datanetiix supports immutable and protected backup architectures where applicable, including:
• Immutable cloud backup repositories
• Air-gapped or logically isolated backup copies
• Multi-tier backup retention strategies
• Role-based access controls for backup administration
• MFA enforcement for backup-management platforms
• Encryption of backup data at rest and in transit
Backup-validation results, failed-job alerts, recovery-test summaries, and storage-capacity conditions are incorporated into ongoing operational monitoring and reporting processes. The City would receive regular reporting related to:
• Backup-job success/failure status
• Backup-health monitoring
• Replication status
• Restore test results
• Retention compliance
• Disaster-recovery readiness observations
Any backup failures, replication issues, or validation anomalies are escalated according to documented operational procedures to ensure timely remediation and continued recovery readiness.

Datanetiix’s backup-validation strategy is designed to support operational continuity, ransomware resilience, disaster-recovery preparedness, and confidence in the recoverability of critical City systems and data.
i. Has your company ever contracted an independent third-party to perform penetration tests against systems you support? If so, when?
Yes. Datanetiix supports the use of independent third-party security assessments and penetration testing as part of an overall cybersecurity governance and risk-management strategy. Third-party assessments may be conducted against internal infrastructure, external-facing systems, cloud environments, remoteaccess platforms, and web applications, depending on client requirements and operational scope.

Penetration testing activities may include:
• External vulnerability and penetration testing
• Internal network-security assessments
• Web-application security testing
• Firewall and VPN security validation
Datanetiix Solutions Inc
Datanetiix Solutions Inc 74
Information Technology Services
City Of Livingston, CA
• Wireless-security assessments
• Configuration and exposure reviews
• Privileged-access and authentication testing
Independent assessments are typically performed annually or based on client, regulatory, insurance, or operational-security requirements. Testing may also be conducted following significant infrastructure changes, cloud migrations, major application deployments, or security events.

The most recent independently coordinated penetration-testing activities and security assessments were completed as part of ongoing security-governance and risk-management initiatives. Specific testing dates, detailed findings, and testing-provider information may be provided under appropriate confidentiality protections and subject to client and vendor authorization requirements.

Following penetration-testing activities, Datanetiix follows a structured remediation and risk-management process that may include:
• Validation and prioritization of findings
• Vulnerability remediation and patch deployment
• Firewall and access-control adjustments
• MFA and identity-security enhancements
• System-hardening improvements
• Monitoring and alerting enhancements
• Documentation updates and operational reviews
• Retesting or validation of remediated findings where applicable Datanetiix utilizes the results of third-party assessments to continuously strengthen security controls, reduce attack surface exposure, improve incident readiness, and align operational-security practices with evolving cybersecurity threats and industry best practices. j. Describe your company’s familiarity with PCI compliance.

Datanetiix has experience supporting environments subject to Payment Card Industry Data Security Standard (PCI-DSS) requirements, including organizations processing electronic payments for services such as utility billing, permit processing, licensing, recreation registrations, and other public-facing payment workflows commonly found within municipal environments.

Our approach to PCI-related environments focuses on reducing organizational risk, minimizing cardholder-data exposure, and supporting secure payment-processing operations through layered security controls, segmentation strategies, and operational governance.

Areas of PCI-DSS familiarity and support include:
• Network segmentation for cardholder-data environments (CDE) • Scope-reduction strategies to minimize PCI exposure
• Secure firewall and access-control configurations
• Multi-factor authentication (MFA) for administrative access • Endpoint protection and vulnerability management
• Logging, monitoring, and audit-trail management
• Patch-management and system-hardening procedures
• Secure remote-access controls
• Backup and disaster-recovery protections for payment-related systems • Vendor and third-party payment-processor coordination Datanetiix is familiar with PCI-DSS operational practices associated with both fully integrated and outsourced payment-processing models, including environments utilizing:

Datanetiix Solutions Inc
Datanetiix Solutions Inc 75
Information Technology Services
City Of Livingston, CA
• Hosted payment gateways
• Third-party payment processors
• Point-of-sale (POS) systems
• Web-based payment portals
• Virtual terminal solutions
We are also familiar with Self-Assessment Questionnaire (SAQ) frameworks commonly associated with municipal payment environments, including scenarios involving:
• Outsourced web-based payment portals
• Segmented payment-processing workstations
• Limited cardholder-data exposure environments
• Third-party hosted payment applications
Where applicable, Datanetiix assists organizations with:
• PCI scope identification and documentation
• Security-control alignment
• Network and firewall review
• Vulnerability-remediation coordination
• Access-review procedures
• Logging and monitoring recommendations
• Coordination with Qualified Security Assessors (QSAs) or Approved Scanning Vendors (ASVs) where required
Datanetiix's layered security strategy, including MFA enforcement, endpoint protection, encryption, monitoring, backup protection, and least-privilege access controls, supports operational-security practices commonly associated with PCI-DSS-aligned environments. Our objective is to help clients reduce compliance complexity, strengthen payment-system security, minimize attack-surface exposure, and maintain secure and reliable payment-processing operations aligned with industry’s best practices and organizational risk-management objectives.
k. Additional information and options (such as any cloud solutions or other technology solutions offered by your company) are welcome, but these must be included in the maximum number of pages allowed for the proposal (see Proposal Format Guidelines).

In addition to the core managed IT and cybersecurity services outlined in this proposal, Datanetiix offers a range of optional technology solutions designed to support long-term operational modernization, cybersecurity resilience, workforce productivity, and digital-service delivery for municipal-government environments.

Optional and value-added service capabilities include:
• Microsoft Azure cloud-migration and hybrid-cloud solutions • Microsoft 365 governance, security, and compliance optimization • SharePoint Online and document-management modernization • Microsoft Teams voice and collaboration solutions
• Identity and access-management modernization using Microsoft Entra ID • Conditional access and Zero Trust security implementations • Power Platform solutions, including Power Automate workflow automation and Power BI reporting dashboards
• Endpoint and mobile-device modernization using Microsoft Intune • Cloud backup and disaster-recovery solutions
• Security assessments, vulnerability reviews, and cybersecurity roadmap planning Datanetiix Solutions Inc
Datanetiix Solutions Inc 76
Information Technology Services
City Of Livingston, CA
• Infrastructure lifecycle and technology-refresh planning • Virtualization and data-center modernization initiatives • Wireless-network modernization and secure remote-access solutions • Public-safety and CJIS-aligned infrastructure support • Multi-site connectivity and operational standardization initiatives Datanetiix also supports strategic technology planning initiatives designed to help municipalities improve operational efficiency, strengthen cybersecurity posture, modernize legacy infrastructure, and align technology investments with budget cycles and long-term organizational goals.

Where appropriate, Datanetiix may assist with identifying technology grant opportunities, cybersecurity funding initiatives, infrastructure-modernization planning, and phased implementation strategies intended to minimize operational disruption while improving service delivery and resiliency.

These optional capabilities may be delivered as part of ongoing managed services, phased modernization initiatives, or project-based engagements depending on the City’s operational priorities, budget considerations, and long-term strategic objectives.

SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE

THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN ACCORDANCE WITH THE POLICY PROVISIONS.

INSURER(S) AFFORDING COVERAGE
INSURER F :

INSURER E :

INSURER D :

INSURER C :

INSURER B :

INSURER A : NAIC #
NAME: CONTACT
(A/C, No): FAX
E-MAIL ADDRESS:

PRODUCER
(A/C, No, Ext): PHONE

INSURED
COVERAGES CERTIFICATE NUMBER: REVISION NUMBER:

IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed.

If SUBROGATION IS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s).

THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS

CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER.

OTHER:
(Per accident)
(Ea accident)
$
$
N / A

SUBR WVDADDL
INSD

THIS IS TO CERTIFY THAT THE POLICIES OF INSURANCE LISTED BELOW HAVE BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD INDICATED. NOTWITHSTANDING ANY REQUIREMENT, TERM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS

CERTIFICATE MAY BE ISSUED OR MAY PERTAIN, THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS, EXCLUSIONS AND CONDITIONS OF SUCH POLICIES. LIMITS SHOWN MAY HAVE BEEN REDUCED BY PAID CLAIMS. $
$
$
$ PROPERTY DAMAGE
BODILY INJURY (Per accident)
BODILY INJURY (Per person) COMBINED SINGLE LIMIT

AUTOS ONLY

AUTOS ONLY AUTOS NON-OWNED OWNED SCHEDULED

ANY AUTO

AUTOMOBILE LIABILITY

Y / N WORKERS COMPENSATION
AND EMPLOYERS' LIABILITY OFFICER/MEMBER EXCLUDED?
(Mandatory in NH) DESCRIPTION OF OPERATIONS below
If yes, describe under

ANY PROPRIETOR/PARTNER/EXECUTIVE
$
$
$ E.L. DISEASE - POLICY LIMIT E.L. DISEASE - EA EMPLOYEEE.L. EACH ACCIDENT EROTH- STATUTE PER
(MM/DD/YYYY) LIMITS POLICY EXP(MM/DD/YYYY) POLICY EFFLTR TYPE OF INSURANCE POLICY NUMBER INSR
DESCRIPTION OF OPERATIONS / LOCATIONS / VEHICLES (ACORD 101, Additional Remarks Schedule, may be attached if more space is required)

EXCESS LIAB
UMBRELLA LIAB EACH OCCURRENCE $ AGGREGATE $
$
OCCUR
CLAIMS-MADE DED RETENTION $
PRODUCTS - COMP/OP AGG $ GENERAL AGGREGATE $ PERSONAL & ADV INJURY $ MED EXP (Any one person) $
EACH OCCURRENCE $ DAMAGE TO RENTED
PREMISES (Ea occurrence) $ COMMERCIAL GENERAL LIABILITY CLAIMS-MADE OCCUR GEN'L AGGREGATE LIMIT APPLIES PER: POLICY PRO- JECT LOC

CERTIFICATE OF LIABILITY INSURANCE DATE (MM/DD/YYYY)

CANCELLATION

AUTHORIZED REPRESENTATIVE
ACORD 25 (2016/03)
© 1988-2015 ACORD CORPORATION. All rights reserved.

CERTIFICATE HOLDER
The ACORD name and logo are registered marks of ACORD
HIRED

AUTOS ONLY
5/15/2026
Technical Insurance Solutions LLC
1000 Gattis School Rd, Ste 250
Round Rock TX 78664
Technical Insurance 737-842-8434 (512) 829-3488 [email protected] Hanover Insurance Company 22292 DATASOL-01 Datanetiix Solutions Inc
9800 MACARTHUR BLVD STE 300
Irvine CA 92612
354642308
A X 1,000,000 X 1,000,000 5,000 1,000,000 2,000,000 X
Y Y R2DM045956 5/16/2026 5/16/2027
2,000,000
A 1,000,000 X XY Y R2DM045956 5/16/2026 5/16/2027
A X X 5,000,000 Y Y R2DM045956 5/16/2026 5/16/2027
5,000,000
A
A
A
E&O with Cyber Liabilty
1st Party Cyber
3rd Party Crime
LHDM045961
LHDM045961
BDDM049182
5/16/2026
5/16/2026
5/16/2026
5/16/2027
5/16/2027
5/16/2027
$5,000,000 Occ
$250,000
$1,000,000
$5,000,000 Agg
The general liability policy includes a blanket automatic additional insured endorsement that provides additional insured status only when there is a written contract between the named insured and the certificate holder that requires such status. The general liability policy includes a blanket automatic waiver of subrogation endorsement that provides this feature only when there is a written contract between the named insured and the certificate holder that requires it.

Insured copy

SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE

THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN ACCORDANCE WITH THE POLICY PROVISIONS.

INSURER(S) AFFORDING COVERAGE
INSURER F :

INSURER E :

INSURER D :

INSURER C :

INSURER B :

INSURER A :

NAIC #
NAME:

CONTACT
(A/C, No):

FAX
E-MAIL
ADDRESS:

PRODUCER
(A/C, No, Ext):

PHONE

INSURED
COVERAGES CERTIFICATE NUMBER: REVISION NUMBER:

IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed.

If SUBROGATION IS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s).

THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS

CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER.

OTHER:
(Per accident)
(Ea accident)
$
$
N / A
SUBR
WVD
ADDL
INSD

THIS IS TO CERTIFY THAT THE POLICIES OF INSURANCE LISTED BELOW HAVE BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD INDICATED. NOTWITHSTANDING ANY REQUIREMENT, TERM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS

CERTIFICATE MAY BE ISSUED OR MAY PERTAIN, THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS, EXCLUSIONS AND CONDITIONS OF SUCH POLICIES. LIMITS SHOWN MAY HAVE BEEN REDUCED BY PAID CLAIMS. $
$
$
$

PROPERTY DAMAGE
BODILY INJURY (Per accident)
BODILY INJURY (Per person)

COMBINED SINGLE LIMIT

AUTOS ONLY

AUTOS ONLY AUTOS

NON-OWNED

OWNED SCHEDULED

ANY AUTO

AUTOMOBILE LIABILITY
Y / N

WORKERS COMPENSATION

AND EMPLOYERS' LIABILITY
OFFICER/MEMBER EXCLUDED?
(Mandatory in NH)
DESCRIPTION OF OPERATIONS below
If yes, describe under

ANY PROPRIETOR/PARTNER/EXECUTIVE
$
$
$
E.L. DISEASE - POLICY LIMIT
E.L. DISEASE - EA EMPLOYEE
E.L. EACH ACCIDENT
ER
OTHSTATUTEPER
(MM/DD/YYYY) LIMITS POLICY EXP(MM/DD/YYYY)

POLICY EFF

LTR TYPE OF INSURANCE POLICY NUMBER
INSR
DESCRIPTION OF OPERATIONS / LOCATIONS / VEHICLES (ACORD 101, Additional Remarks Schedule, may be attached if more space is required)

EXCESS LIAB
UMBRELLA LIAB EACH OCCURRENCE $
AGGREGATE $
$
OCCUR

CLAIMS-MADE
DED RETENTION $
PRODUCTS - COMP/OP AGG $
GENERAL AGGREGATE $
PERSONAL & ADV INJURY $
MED EXP (Any one person) $
EACH OCCURRENCE $

DAMAGE TO RENTED
PREMISES (Ea occurrence) $

COMMERCIAL GENERAL LIABILITY

CLAIMS-MADE OCCUR
GEN'L AGGREGATE LIMIT APPLIES PER:

POLICY PROJECT LOC

CERTIFICATE OF LIABILITY INSURANCE DATE (MM/DD/YYYY)

CANCELLATION

AUTHORIZED REPRESENTATIVE
ACORD 25 (2016/03)
© 1988-2015 ACORD CORPORATION. All rights reserved.

CERTIFICATE HOLDER
The ACORD name and logo are registered marks of ACORD
HIRED

AUTOS ONLY
10/17/2025
Automatic Data Processing Insurance Agency, Inc.
1 Adp Boulevard
Roseland NJ 07068
Automatic Data Processing Insurance Agency, Inc.
1-800-524-7024

DATANETIIX SOLUTIONS INC
DBA: DATANETIIX SOLUTIONS INC
6 Normandie
Aliso Viejo CA 92656
Pacific Compensation Insurance Company 11555
4606148
A N N WC1030770 10/27/2025 10/27/2026
1,000,000
1,000,000
1,000,000

INSURED COPY
500 Singleton Blvd
Dallas TX 75212
This proposal contains proprietary information that shall not be duplicated, used, or disclosed for any reason other than evaluation of the proposal. If release is required due to transparency requirements, all information regarding performance methodology, pricing methodology, other items that are considered trade secrets and any Personally Identifiable Information must be redacted.

Managed Information Technology Services
City of Livingston,California
Due Date: May 29, 2026, at 4:30 PM
Submitted to:

Monica Cisneros, Deputy City Clerk
City of Livingston
1416 C Street
Livingston, California 95334
Email: [email protected]
Technical and Price Proposal
Submitted by:

Global Solutions Group, Inc.
31681 Dequindre Road
Madison Heights, MI 48071
www.GlobalSolGroup.com

Offeror
Global Solutions Group, Inc.
31681 Dequindre Road
Madison Heights, MI 48071
www.GlobalSolGroup.com
UEI VH3UE9S2T6E5
CAGE 6M9L5
DUNS 078343325
EIN 20 0010736
US DoD TopSecret Facility
Clearance
Contracting Vehicles
Personnel authorized to negotiate with the Government and sign the proposal and subsequent award on Offeror’s behalf:

Lisa Salvador, Vice President
Direct: (313) 397-8311
Mobile: (313) 333-0188
[email protected] || [email protected] Acknowledgement of Addenda, Questions and Answers, and other Modifications GSG acknowledges that we have received Amendment 1 received dated 05/15/2026.

Submit to:

Monica Cisneros, Deputy City Clerk
City of Livingston
1416 C Street, Livingston, California 95334
Email: [email protected]

31681 Dequindre Road, Madison Heights, Michigan 48071
www.GlobalSolGroup.com
Table of Contents

1. General Company Information............................................................................................ 1 a. Provide an overview of your company, including:............................................................................ 1 b. Pending Legal Matters ..................................................................................................................... 5 c. Investigations Status ........................................................................................................................ 5

2. References ........................................................................................................................... 6 a. Client Reference Details .................................................................................................................. 6 b. References for Annual Obligation .................................................................................................. 11 c. GSG’s Technology Partners .......................................................................................................... 13

3. Staffing................................................................................................................................15 a. Organizational Structure ................................................................................................................ 15 b. Support Team Structure................................................................................................................. 15 c. Staff Retention Rate....................................................................................................................... 19 d. Key Personnel Resumes................................................................................................................ 20 e. Help Desk Staff Requirements....................................................................................................... 20 f. Staff Training and Development Programs.................................................................................... 21

4. Security ...............................................................................................................................24

5. Services...............................................................................................................................31

6. Monitoring...........................................................................................................................36

7. Management and Documentation......................................................................................39

8. Documentation, Record Keeping and Reporting..............................................................41

9. Transition Plan....................................................................................................................43

10. Fees..............................................................................................................................47

11. Optional Fees...............................................................................................................56

12. Miscellaneous..............................................................................................................57

13. Additional Information ................................................................................................63 Appendix I: Key Personnel Resumes ...................................................................................... i Appendix II- Performance Evaluations................................................................................xxv Unsolicited Customer Reviews .................................................................................................xxv Contractor Performance Assessment Reporting System Performance References..........xxvi Performance Summary by What Mattered Most to Our Customers .................................... xxvii Performance Evaluation Table – Grouped by Benefit Category .......................................... xxvii Department of Health and Human Services Legal Resource Professional ..................................xxx Wakulla County - Contractor Performance Evaluation Questionnaire........................................ xxxii Department of Interior: Department of State.............................................................................. xxxiii U.S. Department of Agriculture (USDA) Office of Information Security (OIS) ........................... xxxvi USDA Office of Information Security (OIS) Penetration Testing (2018)..................................... xxxix Air Force: Buckley Garrison Medical Group....................................................................................xli Office of Administrative Services – Internal Acquisition Division .................................................. xlvi

31681 Dequindre Road, Madison Heights, Michigan 48071
www.GlobalSolGroup.com
Buckley AFB Recommendation Letter ........................................................................................ xlviii City of New Orleans ...................................................................................................................... xlix U.S Naval Hospital, Guam ...............................................................................................................lv State of Kansas: MHBE IT Consulting and Technical Support Services .........................................lv

31681 Dequindre Road, Madison Heights, Michigan 48071
www.GlobalSolGroup.com
May 29, 2026
Monica Cisneros, Deputy City Clerk
City of Livingston
1416 C Street
Livingston, California 95334
Subject: Global Solutions Group, Inc. (GSG) Response to Managed Information Technology Services for City of Livingston, California (City).

Dear Ms. Cisneros,
Global Solutions Group, Inc. (GSG) is pleased to submit our technical proposal in response to your Request for Proposal for Managed Information Technology Services for City of Livingston, California (City).

Incorporated in the State of Michigan in 2003 and headquartered in Madison Heights, Michigan, GSG is an SBA 8(a) Certified Small Business, Certified Women Owned Small Business (WOSB), Certified Minority Business Enterprise (MBE), and Economically Disadvantaged Woman - Owned Small Business (EDWOSB).

GSG is an ISO/IEC
27001:2022 Information
Security and
Cybersecurity, ISO 9001:2015 Quality
Management System, and ISO 20000:2018
Service Management System Certified Firm.

GSG is a proven leader in delivering advanced
technology and security solutions across
Cybersecurity, IT Infrastructure, Data and
Document Management, and Physical Security.

GSG is also SOC 2 Type 2
certified. Our internal control
system for handling customer data
meets high standards of security,
availability, processing integrity, confidentiality,
and privacy was audited this year by ACCORP Partners, an AICPA registered firm. Our expertise extends to a wide array of leading IT and cybersecurity technologies through partnerships with Fortinet, Splunk, Redgate SQL Toolbelt - Developer Tool, Twilio, Digital Certificate SFTP Server, AngularJS Extended Support -Developer Tool, Tenable, CrowdStrike, Laserfiche, AWS, ServiceNow, Tanium, CyberArk PAM, Invicti, Azure, Sonatype, Salesforce, Palo Alto, Adobe, SentinelOne, Trellix, Proofpoint, and Zoom.

We are CMMI Maturity Level 3 appraised, our organizational standards provide guidance across our projects, programs, and portfolios. Our processes are proactive in addressing potential risks, and our processes are recognized for meeting world-class standards.

UNDERSTANDING OF REQUIREMENTS
GSG understands that the City is seeking a qualified and reliable Managed IT Services partner to deliver comprehensive, secure, and responsive technology support across its municipal environment. The City requires end-to-end IT services that include network infrastructure management, 24/7/365 monitoring and help desk support, cybersecurity management, disaster recovery and backup support, Microsoft systems administration, hardware and application GSG’s clients in California
 City of Visalia
 City of San Jose
 City and County of San Francisco
 City of Sunnyvale
 City of Santa Clara
 City of Rancho Cucamonga
 City of Clovis (Police Department)
 City of Roseville
 Cosumnes Community Services District
 San Diego County Regional Airport Authority
 San Bernardino County Transportation
Authority (SBCTA)
 Sacramento Regional Transit District
(SacRT)
 Golden Gate Bridge Highway and
Transportation District
 State of California

31681 Dequindre Road, Madison Heights, Michigan 48071
www.GlobalSolGroup.com
support, VoIP and communication system support, as well as on-site and remote technical assistance. GSG recognizes the importance of maintaining a stable, secure, and high-performing IT environment that supports critical public services, administrative operations, and continued business continuity across all City departments and locations.

GSG further understands that the City requires a strategic IT partner capable of providing proactive monitoring, issue resolution, documentation, asset and license management, reporting, and long-term technology planning under a fixed monthly pricing model. The environment includes multiple locations, diverse endpoints, servers, network devices, cloud backup systems, and specialized systems requiring secure and compliant support. GSG recognizes the importance of strong security controls, rapid response capabilities, operational transparency, and scalable support aligned with the City’s objectives. Through proven managed services expertise, structured service delivery, and customer-focused support, GSG is prepared to help the City strengthen infrastructure reliability, improve security posture, and ensure efficient IT operations.

As a Microsoft AI Cloud Gold Certified Partner, GSG can provide a comprehensive range of services including network maintenance and support, system engineering, and
troubleshooting for all Microsoft products.

GSG’S STANDOUT STRENGTHS
GSG is a trusted leader in technology and cybersecurity solutions, delivering advanced services across Managed IT Services, Cybersecurity, Infrastructure Support, Network Management, Cloud Solutions, and Data Protection. With over two decades of experience and more than 1,000 successful technology and cybersecurity engagements, GSG brings deep expertise to support the City’s IT infrastructure, network environment, end-user systems, and critical technology operations. Our team holds over forty industry-recognized certifications, with professionals averaging more than fifteen years of experience supporting public-sector, municipal, and enterprise environments, including complex IT infrastructures, cloud platforms, cybersecurity operations, and business continuity requirements.

As a Microsoft Gold Certified Partner for AI and Cloud Services, GSG provides the City with advanced Microsoft expertise, priority access to support resources, and early adoption of emerging technologies. This designation reflects our commitment to delivering secure, scalable, and reliable IT solutions aligned with the operational requirements of municipal agencies and mission-critical public-sector environments.

GSG brings extensive experience delivering Managed IT Services, infrastructure administration, and end-user technology support for municipal and public-sector organizations with operational environments similar to the City. Our team provides comprehensive IT support including 24/7 monitoring and response, help desk services, Microsoft 365 and Windows administration, network

31681 Dequindre Road, Madison Heights, Michigan 48071
www.GlobalSolGroup.com
and cybersecurity management, patching and endpoint protection, backup and disaster recovery support, vendor coordination, and proactive system maintenance.

GSG supports diverse technology environments including servers, desktops, mobile devices, cloud and on-premises systems, VoIP communications, and virtualized infrastructure such as VMware and Hyper-V. Our services are designed to ensure operational continuity, infrastructure reliability, secure day-to-day operations, and rapid issue resolution across multi-location environments.

Through our public-sector engagements, GSG has consistently delivered secure, scalable, and cost-effective IT services supported by experienced engineers, system administrators, and help desk professionals. We understand the importance of responsive support, strong cybersecurity practices, clear reporting, and coordinated vendor management in municipal environments and are well positioned to support the City’s technology infrastructure and long-term IT objectives.

GSG has been awarded the Network Support Services contract by the City of Rochester Hills to support and manage the City’s IT infrastructure.

GSG was awarded a contract to provide Information Technology (IT) Support Services to the City of Santa Clara.

GSG conducted a cybersecurity risk assessment and developed a formal Cyber Resilience Program (CRP) and implementation plan for the City of Visalia. “I wanted to take a moment to personally thank the GSG team for their incredible work during our transition to GSG. Your Team has been absolutely amazing with their hard work, and I also want to acknowledge the efforts of the rest of the behind-the-scenes GSG team. The professionalism and expertise they’ve demonstrated is exactly what we were hoping for from GSG. Their exceptional support, responsiveness, problem-solving abilities, and proactive communication have been a breath of fresh air, and it’s so appreciated. Our team at the city, without me prompting them, have expressed how thankful they are that we chose GSG. The fire chief in particular had nothing but great things to say about the site visits and the efforts to resolve their issues. “ - City of Rochester, IT Support
We appreciate the opportunity to submit our proposal to the City and look forward to the possibility of serving as your trusted technology partner. We are eager to discuss how our expertise in municipal IT management can enhance your operations while ensuring security, compliance, and efficiency. Please feel free to contact us using the details below for any additional information or to schedule further discussions.

Point of Contact Details
Name: Lisa Salvador
Title: Vice President
Email: [email protected] || [email protected] Telephone: (313) 397-8311 (office) (313) 333-0188 (mobile) As Vice President of Global Solutions Group, Inc., I am fully authorized to negotiate and bind GSG during the period in which with the City is evaluating proposals. You may contact me at any time.

Regards,
Lisa Salvador
Vice President

Page | 1

1. General Company Information
a. Provide an overview of your company, including:
i. The year your company was started, and the number of years providing managed IT services and help desk support.

GSG was established in 2003 and has more than twenty-three years of experience delivering comprehensive managed IT services, help desk support, cybersecurity solutions, infrastructure management, cloud services, and strategic technology consulting to public-sector, municipal, education, healthcare, nonprofit, and commercial organizations.

Throughout its history, GSG has successfully supported organizations of varying sizes and operational complexities by providing reliable, responsive, and scalable IT solutions tailored to each client’s operational and security requirements. Our experience includes end-user support, network administration, server management, virtualization, backup and disaster recovery, cybersecurity monitoring, patch management, cloud migration, and 24/7 technical support services.

GSG has developed mature service delivery processes, experienced technical teams, and proactive support methodologies designed to improve system reliability, strengthen cybersecurity posture, minimize downtime, and support long-term technology planning initiatives. Our extensive managed services experience enables us to provide responsive help desk operations, advanced engineering support, and strategic IT guidance aligned with organizational objectives and the industry’s best practices.
ii. Number of customers and average size of customers’ organizations GSG currently supports more than 125 clients across federal, state, local government, education, healthcare, nonprofit, and commercial sectors. Our customer base includes over twenty-five federal government agencies and more than 100 state and local government organizations, demonstrating extensive experience delivering managed IT services and help desk support within complex and mission-critical environments.

GSG’s experience spans organizations of varying sizes and operational complexities, ranging from small municipalities and local agencies to large-scale enterprise and government environments supporting thousands of users across geographically distributed locations. This diverse experience enables GSG to effectively support organizations with operational, compliance, cybersecurity, and infrastructure requirements similar to those of the City.

GSG provides comprehensive managed IT services including 24/7/365 monitoring and help desk support, cybersecurity operations, infrastructure management, cloud services, virtualization, backup and disaster recovery, endpoint management, patch management, network administration, and strategic IT planning. Our technical teams support both remote and on-site environments while maintaining high availability, proactive monitoring, rapid incident response, and secure system operations.

In addition to enterprise-level support capabilities, GSG provides highly responsive and scalable support services tailored to the needs of small and mid-sized municipalities and organizations.

Our flexible service delivery model allows GSG to align technology services with client operational goals, security requirements, and long-term IT initiatives.

Category GSG Experience & Client Profile
Total Clients
Supported
GSG currently supports 125+ clients across federal, state, local government, education, healthcare, nonprofit, and commercial sectors.

Page | 2
Category GSG Experience & Client Profile
Federal Government
Agencies
GSG supports 25+ federal agencies with managed IT, cybersecurity, infrastructure, cloud, and help desk services.

State and Local
Government Clients
GSG supports 100+ state and local government organizations, including municipalities, counties, public agencies, and educational institutions.

Large-Scale
Enterprise Support
GSG has managed complex enterprise environments supporting thousands of users, multi-site operations, and mission-critical infrastructure.

Public Sector
Experience
Extensive experience supporting municipal governments, public safety organizations, and public-sector operations requiring secure and highly available IT environments.

Small and Mid-Sized
Organizations
GSG also supports small and mid-sized municipalities and agencies with scalable and responsive IT services.

Core Services
Provided
Services include managed IT services, help desk support, cybersecurity, cloud solutions, infrastructure management, virtualization, backup and disaster recovery, and endpoint management.

Support Capabilities GSG provides 24/7/365 monitoring, remote and on-site support, proactive maintenance, patch management, and rapid incident response services.

Operational
Experience
Experience supporting multi-location environments, remote users, cloud infrastructure, public safety systems, and secure government networks.

Industry Reputation GSG has established a strong reputation for delivering reliable, secure, scalable, and responsive managed IT services tailored to public-sector operational requirements.
iii. Number of employees:
• Number of Employees - 126
• Number of Employees in Account Management -9
• Number of Employees in Technical Support – 112
GSG maintains a highly experienced workforce of 126 employees dedicated to delivering responsive and reliable Information Technology services to public-sector and commercial clients nationwide. This includes a specialized Account Management team focused on customer coordination, service delivery oversight, and strategic planning, as well as a large Technical Support team responsible for day-to-day operational support, infrastructure management, cybersecurity services, and end-user assistance. This staffing structure enables Global Solutions Group, Inc. to provide scalable, proactive, and client-focused managed Information Technology support services.
iv. Background and history
GSG is a privately held corporation incorporated in the State of Michigan in 2003. Originally founded as Multi Solutions, Inc., the firm rebranded to Global Solutions Group, Inc. in 2012 to reflect its expanded service offerings and growing national presence. For more than twenty-three years, GSG has delivered technology, cybersecurity, and compliance-focused services to publicsector, quasi-governmental, and mission-driven organizations across the United States.

GSG’s evolution has been shaped by the needs of lean-staffed government entities that require secure, well-governed, and auditable IT environments. What began as IT consulting and staffing

Page | 3
services expanded into fully managed IT services, cybersecurity engineering, and independent security and control assessments. Between 2014 and 2016, GSG established a dedicated cybersecurity practice — GSG Cyber — to support organizations operating in regulated and highrisk environments.

This foundation led to significant federal and quasi-governmental engagements, including multiyear contracts supporting the USDA, Treasury Office of Inspector General, Department of the Interior, Department of Homeland Security, and the AbilityOne Commission. These engagements required adherence to rigorous audit standards, documented control environments, and coordination with financial, operational, and external audit stakeholders — experience that directly aligns with the City’s requirement.

In recent years, GSG has expanded its focus on municipalities, authorities, and public-sector organizations, delivering comprehensive IT assessments, governance evaluations, operational maturity reviews, and cybersecurity advisory services. Our work includes evaluating IT organizational structures, policies, workflows, infrastructure environments, and service delivery models to identify efficiencies, modernization opportunities, and capacity improvements.

GSG’s extensive experience supporting entities subject to public accountability, grant oversight, and regulatory requirements positions the firm to assist the City in strengthening governance, improving operational effectiveness, and aligning technology investments with strategic priorities.

We approach each engagement with professionalism, discretion, and a structured methodology that produces clear, prioritized, and actionable recommendations.

GSG continuously expands our core offerings to align with evolving technological trends. We actively invest in employee training to enhance skills and expertise. Our staff are encouraged to pursue and achieve industry-leading certifications. This commitment ensures our team remains knowledgeable of emerging technologies. By fostering continuous professional growth, GSG maintains its position at the forefront of the industry.

Page | 4
GSG has considerable experience in providing IT and cybersecurity services to a broad variety of private and public sector clients. GSG is experienced in providing a wide range of IT and cybersecurity services throughout the United States and worldwide to local, state, and federal agencies and corporations. We have earned a national reputation as a valuable partner that consistently exceeds customer expectations.

GSG continuously evolves its core service offerings to align with emerging IT governance standards, cybersecurity best practices, operational efficiency models, and technology modernization strategies. We actively invest in ongoing professional development to strengthen expertise in IT organizational assessment, infrastructure evaluation, risk management, and strategic technology planning. Our team maintains industry-recognized certifications and stays current on evolving technologies, governance frameworks, and public-sector accountability requirements that directly impact municipalities and government agencies.

GSG has extensive experience providing IT assessments, governance reviews, infrastructure evaluations, and cybersecurity advisory services to a broad range of public-sector clients. We have supported local, state, and federal entities in evaluating IT organizational structures, reviewing policies and workflows, identifying operational inefficiencies, and developing actionable improvement roadmaps. Our experience includes reviewing application portfolios, enterprise infrastructure environments, identity and access management systems, electronic document management solutions, disaster recovery programs, and business continuity planning — all directly aligned with the City’s objectives.

GSG maintains a robust and diverse municipal client base, including cities, counties, transit authorities, utilities, and regional agencies. Our team is experienced in delivering structured IT assessments that identify strengths, gaps, modernization opportunities, and capacity constraints, followed by prioritized recommendations and implementation planning. This positions GSG to provide practical, fiscally responsible, and forward-looking guidance that supports the City’s goals of improving governance clarity, operational efficiency, service delivery effectiveness, and longterm technology maturity.

Cybersecurity-Related Services
Sectors Served
With more than twenty-three years of experience, GSG has delivered secure, innovative cybersecurity solutions to higher-education institutions and public-sector organizations nationwide.

Page | 5
v. Office Locations:

GSG maintains its headquarters and multiple branch office locations across the United States to effectively support clients across various regions. Our office locations are as follows:

Office locations
Headquarters:

Michigan 31681 Dequindre Road
Madison Heights, Michigan 48071
Virginia/Metropolitan Washington,
District of Columbia Office
4250 North Fairfax Drive, Suite 600
Arlington, Virginia 22203
Branch Offices
Florida 113 East College Avenue, Suite 312
Tallahassee, Florida 32301
Virginia/Washington, District of
Columbia Metropolitan Area
13800 Coppermine Road
Herndon, Virginia 20171
Boston, Massachusetts 84 State Street, Suite 900
Boston, Massachusetts 02109
GSG’s strategically located offices enable the organization to provide responsive, high-quality support and services to clients across multiple regions. b. Pending Legal Matters
Are there any lawsuits, judgments or liens pending against your organization as a result of services provided by your company and/or that would negatively impact your company’s ability to provide managed IT services to the City? GSG confirms that there are no lawsuits, judgments, or liens pending against the company that would negatively impact on our ability to provide managed IT services to the City. c. Investigations Status
Is your company currently under investigation by any entity? If yes, include an explanation.

GSG confirms that the company is not currently under investigation by any entity.

Page | 6

2. References
a. Client Reference Details
Provide contact information (and the number of years your organization has provided managed IT and help desk services) for four references, as follows:
i. The organization your company has supported for the longest period of time GSG has provided Managed IT and Help Desk Services to organizations requiring long-term, reliable, and secure technology support. Through these engagements, GSG has consistently delivered responsive support, infrastructure management, proactive monitoring, and operational stability across complex IT environments. Below is the organization GSG has supported for the longest period of time.

Reference: State of Kansas – IT and Cybersecurity Support Services 📅📅
Number of Years
Supported
GSG has supported the State of Kansas for over six years, with the primary contractual relationship beginning in October 2019 -August 2028.

Managed IT and Help Desk Services
• Infrastructure Management: GSG provides maintenance and proactive monitoring for the state's IT infrastructure, including servers, switches, firewalls, routers, and other network security devices.
• Proactive Support: The team implements monitoring systems with alert notifications to detect performance degradation or device failures immediately. • Operational Support: Services include asset management, patch management, anti-virus oversight, change management, and configuration standards enforcement. • Data Continuity: GSG manages data backups and leads Disaster Recovery (DR) and Continuity of Operations (COOP) planning and implementation. • Desktop and End-User Support: GSG performs basic support functions such as installing and configuring PCs, laptops, and peripherals, as well as diagnosing and correcting desktop application problems.
• Strategic Security Leadership: GSG provided a CISO-at-Large to oversee security program management for over fifty separate state agencies, helping them launch standardized risk management programs and conduct annual self-assessments.

Contact Information
👤👤 Contact Name Nathaniel Kunst, ISO At-Large
📍📍 Address 2800 SW Topeka Blvd, Topeka, KS 66611
📞📞 Phone Number 321-517-8729
✉ Email Address [email protected]
Description
GSG has provided long-term managed IT, cybersecurity, infrastructure, and information security support services for multiple agencies across the State of Kansas. Our support has included Information Security Officer (ISO) services, managed network and server administration, 24/7 monitoring, cybersecurity incident response, malware recovery, disaster recovery planning, vulnerability assessments, penetration testing, infrastructure upgrades, and end-user support services.

Key support areas have included:
• ISO Services across multiple state agencies
• 24/7 infrastructure monitoring and operational support • Managed network, server, firewall, and security device administration

Page | 7
• Malware recovery, forensic investigations, and cybersecurity incident response • Vulnerability assessments and penetration testing services • Disaster Recovery (DR) and Continuity of Operations Planning (COOP) support • Patch management, antivirus management, and system hardening • Citrix NetScaler infrastructure upgrade and support services • Desktop support and end-user technical assistance
Notable engagements have included cybersecurity and forensic support for the Kansas Board of Tax Appeals, Kansas Department of Corrections, and Kansas Department of Health & Environment. Through these engagements, GSG has demonstrated its ability to support complex government IT environments requiring secure operations, infrastructure reliability, compliance-focused support, and responsive technical services. ii. A nonprofit or other organization with approximately 30 employees GSG has supported nonprofit and community-focused organizations that require dependable Managed IT Services, Help Desk Support, cybersecurity, and day-to-day IT operations for small to mid-sized environments. Through these engagements, GSG has delivered responsive support, system reliability, and efficient technology management tailored to organizations with similar operational needs. Below is a nonprofit or other organization with approximately thirty employees.

Reference: OPC Social & Activity Center, City of Rochester 📅📅
Number of Years
Supported
The sources do not explicitly state the start date for this contract; however, it is listed as a current reference for managed IT services in documentation dated October 2025
Managed IT and Help Desk Services
• Service Desk Support: GSG delivers Tier I and II support services, including help desk troubleshooting, issue resolution, remote diagnostics, and escalation when necessary. • Infrastructure Monitoring: The team provides 24/7/365 network monitoring for wired and wireless networks, including firewalls, switches, and wireless access points. • Microsoft and Virtualization Services: GSG manages the organization's Windows Server environments, VMware infrastructure, and Active Directory. • Cloud and Communication Support: Administration of Microsoft 365 and Exchange, along with ongoing technical support for users.
• Maintenance and Security: Services include patch management, system maintenance, and cybersecurity oversight to ensure technology reliability and data protection. • Reporting: GSG provides monthly reports detailing service activities and resolution times Contact Information
👤👤 Contact Name Renee Cortright, Executive Director
📍📍 Address 650 Letica Drive, Rochester, MI 48307
📞📞 Phone Number 248-608-0255 (Direct) or 248-722-3408 (Mobile) ✉ Email Address [email protected]
Description
GSG provides full-scope Managed IT Services, cybersecurity support, and infrastructure management services for multiple agencies across the State of Kansas. Services have included ongoing operational support, cybersecurity program management, infrastructure administration, incident response, vulnerability management, and end-user technical support for complex government environments.

Key services provided include:
• ISO Services and security program support
• 24/7 infrastructure and network monitoring services

Page | 8
• Managed server, firewall, switch, and network administration • Cybersecurity incident response and malware recovery services • Vulnerability assessments and penetration testing
• DR and COOP support
• Patch management, antivirus management, and system hardening • Citrix NetScaler infrastructure upgrades and administration • Desktop support and end-user technical assistance
iii. An organization with IT infrastructure, including Terminal Server for remote access, and support requirements comparable to the City
GSG has supported organizations with IT infrastructure environments requiring secure remote access, system administration, server management, and responsive technical support comparable to the City’s operational needs. Through these engagements, GSG has delivered reliable support for infrastructure stability, user accessibility, proactive monitoring, and efficient day-to-day IT operations. Below is an organization with IT infrastructure, including Terminal Server for remote access, and supports requirements comparable to the City.

Reference : IT Support Services - City of Clio- Michigan 📅📅
Number of Years
Supported
GSG has supported the City of Clio since August 2025 (or June 2025 per some records), and the current contract period runs through June 2028.

Managed IT and Help Desk Services
• Infrastructure and Network Management: Administration of the municipality’s network, servers, and hardware, with specific expertise in managing Cisco switches and Dell servers.
• 24/7/365 Help Desk: Around-the-clock support for municipal employees and public safety departments through a web or on-premises ticketing system, providing both remote and onsite assistance. • Cybersecurity and Compliance: Maintenance of firewalls, antivirus, and encryption; all technicians are LEIN-CJIS compliant to support law enforcement systems, and the city is supported for PCI/DSS compliance.
• Software Support: Comprehensive support for municipal applications, including Microsoft 365, Google Workspace, BS&A, and Enterprise ArcGIS.
• Strategic Planning: Long-term IT strategy planning, technology trend advice, and system upgrade evaluations for budgeting.

Contact Information
👤👤 Contact Name Neil Rankin, City Administrator
📍📍 Address 505 W. Vienna Street, Clio, MI 48420
📞📞 Phone Number (810) 686-5850
✉ Email Address [email protected]
Description
GSG provides comprehensive IT professional services to support the City’s municipal operations and technology environment. Services are delivered in accordance with industry best practices, cybersecurity standards, and public-sector compliance requirements.

1. IT Infrastructure Management
• Operates, maintains, and supports the City’s servers, desktops, laptops, network equipment, wireless infrastructure, and VoIP systems.
• Supports Microsoft environments, VMware/Hyper-V platforms, cloud and local backups, and remote access technologies.

Page | 9
• Provides proactive monitoring, patch management, maintenance, and performance optimization.

2. Cybersecurity Services
• Conducts security monitoring, vulnerability management, and system assessments. • Manages firewalls, antivirus, endpoint protection, patching, and incident response activities.
• Supports CJIS, CLETS, and public safety security compliance requirements.

3. Software and Application Support
• Provides support for Microsoft 365, municipal applications, VoIP systems, and remote access technologies.
• Assists with software implementation, upgrades, troubleshooting, and routine updates. • Maintains system stability, compatibility, and security through ongoing maintenance.

4. Data Management and Disaster Recovery
• Manages secure cloud and local backup solutions.
• Provides disaster recovery planning, backup validation, and recovery testing. • Maintains secure data handling and business continuity procedures.

5. Help Desk and Technical Support
• Provides 24/7/365 help desk and technical support services. • Delivers remote and on-site support for hardware, software, and connectivity issues. • Utilizes structured ticketing, escalation, and reporting procedures.

6. IT Consulting and Strategic Planning
• Advises City leadership on technology improvements, cybersecurity, and IT best practices.
• Supports IT project coordination, budgeting, lifecycle planning, and infrastructure upgrades.
• Maintains system documentation, reporting, and asset tracking. iv. A client whom you recently started supporting (since January 1, 2014) GSG has recently begun supporting organizations requiring Managed IT Services, Help Desk Support, infrastructure management, and secure technology operations to ensure seamless onboarding and reliable service delivery. Through these engagements, GSG has demonstrated efficient transition support, responsive issue resolution, and strong operational management aligned with client requirements. Below is a client whom GSG recently started supporting since January 1, 2014.

Reference 1: IT support Services - City of Clio- Michigan 📅📅
Number of Years
Supported
GSG has supported the City of Clio since August 2025 (or June 2025 per some records), and the current contract period runs through June 2028.

Managed IT and Help Desk Services
• Infrastructure and Network Management: Administration of the municipality’s network, servers, and hardware, with specific expertise in managing Cisco switches and Dell servers.
• 24/7/365 Help Desk: Around-the-clock support for municipal employees and public safety departments through a web or on-premises ticketing system, providing both remote and onsite assistance. • Cybersecurity and Compliance: Maintenance of firewalls, antivirus, and encryption; all technicians are LEIN-CJIS compliant to support law enforcement systems, and the city is supported for PCI/DSS compliance.
• Software Support: Comprehensive support for municipal applications, including Microsoft 365, Google Workspace, BS&A, and Enterprise ArcGIS.

Page | 10
• Strategic Planning: Long-term IT strategy planning, technology trend advice, and system upgrade evaluations for budgeting.

Contact Information
👤👤 Contact Name Neil Rankin, City Administrator
📍📍 Address 505 W. Vienna Street, Clio, MI 48420
📞📞 Phone Number (810) 686-5850
✉ Email Address [email protected]
Description
GSG provides comprehensive IT professional services to support the City’s municipal operations and technology environment. Services are delivered in accordance with industry best practices, cybersecurity standards, and public-sector compliance requirements.

1. IT Infrastructure Management
• Operates, maintains, and supports the City’s servers, desktops, laptops, network equipment, wireless infrastructure, and VoIP systems.
• Supports Microsoft environments, VMware/Hyper-V platforms, cloud and local backups, and remote access technologies.
• Provides proactive monitoring, patch management, maintenance, and performance optimization.

2. Cybersecurity Services
• Conducts security monitoring, vulnerability management, and system assessments. • Manages firewalls, antivirus, endpoint protection, patching, and incident response activities.
• Supports CJIS, CLETS, and public safety security compliance requirements.

3. Software and Application Support
• Provides support for Microsoft 365, municipal applications, VoIP systems, and remote access technologies.
• Assists with software implementation, upgrades, troubleshooting, and routine updates. • Maintains system stability, compatibility, and security through ongoing maintenance.

4. Data Management and Disaster Recovery
• Manages secure cloud and local backup solutions.
• Provides disaster recovery planning, backup validation, and recovery testing. • Maintains secure data handling and business continuity procedures.

5. Help Desk and Technical Support
• Provides 24/7/365 help desk and technical support services. • Delivers remote and on-site support for hardware, software, and connectivity issues. • Utilizes structured ticketing, escalation, and reporting procedures.

6. IT Consulting and Strategic Planning
• Advises City leadership on technology improvements, cybersecurity, and IT best practices.
• Supports IT project coordination, budgeting, lifecycle planning, and infrastructure upgrades.
• Maintains system documentation, reporting, and asset tracking.

Reference 2: Information Technology Managed Services - City of Flushing, Michigan 📅📅
Number of Years
Supported
GSG has supported the City of Flushing since January 2025, and the relationship is currently ongoing.

Managed IT and Help Desk Services
• Service Desk Support: Provision of end-user and backend application support, including troubleshooting and escalation to Level II or Level III technicians with monthly status

Page | 11
reports.
• 24/7/365 Monitoring: Proactive monitoring of the entire IT infrastructure, including wired/wireless networks, switches, ASA firewalls, and wireless access points. • Server and Virtualization Admin: Administration of Microsoft servers (Windows 2019), VMware, and SQL Server 2019 databases, including performance optimization and Active Directory management.
• Backup-as-a-Service: Daily incremental backups with a rolling six-month retention period. • Desktop-as-a-Service: Workstation provisioning, imaging, patching, and physical deployment of peripherals, including pre-election "Electronic Poll Book" laptops. • Security and Compliance: Ongoing security assessments and annual penetration testing for networks and applications, ensuring compliance with CJIS, HIPAA, and PCI standards.

Contact Information
👤👤 Contact Name Michelle M. King, City Manager
📍📍 Address 725 E. Main Street, Flushing, MI 48433
📞📞 Phone Number (810) 659-5665
✉ Email Address [email protected]
Description
GSG provides comprehensive Managed Information Technology Services designed to support the City’s operational, security, and technology objectives. Our services include 24/7/365 help desk support, proactive monitoring, network management, cybersecurity protection, disaster recovery, and strategic IT guidance for municipal environments. GSG supports Microsoft environments, VMware/Hyper-V platforms, VoIP systems, cloud and local backups, mobile devices, and CJIS-compliant public safety systems.

Key services include:
• 24/7/365 Help Desk and Infrastructure Monitoring
• Network, Server, and Desktop Support
• Microsoft, VMware, and VoIP Administration
• Patch Management, Antivirus, and Endpoint Security
• Backup, Disaster Recovery, and Business Continuity Support • Cybersecurity, Vulnerability Management, and Incident Response • Asset Tracking, Documentation, and IT Reporting
• On-Site Technical Support and Technology Planning
• GSG provides responsive end-user support across multiple City locations, including workstation deployment, software installation, troubleshooting, hardware support, and remote connectivity assistance. Our engineers support Cisco, Juniper, and Ubiquiti network environments, while maintaining structured escalation procedures, service reporting, and security-focused operational practices.

GSG is experienced in supporting organizations with CJIS, CLETS, and PCI compliance requirements and delivers secure, resilient, and scalable IT services tailored to municipal operations.
b. References for Annual Obligation
Provide contact information for two vendor references with an annual obligation of $48,000 or higher.

GSG has supported clients with annual managed IT service obligations exceeding $48,000, delivering reliable technology support, infrastructure management, cybersecurity oversight, and responsive help desk services. Through these engagements, GSG has demonstrated strong service delivery, operational consistency, and long-term support for critical IT environments.

Page | 12
Below are vendor references with an annual obligation of $48,000 or higher.

Reference 1: City of New Orleans, Louisiana
📅📅
Number of Years
Supported
Supported from September, 2022 through ongoing.

Annual obligation: over $500,000
Managed IT & Help Desk Services
• Implemented ServiceNow Technology Resource Management • GSG provides help desk servicing including: service tickets opened and closed, problems and corrective actions, new and pending issues.

Contact Information
👤👤 Contact Name Tracy Myers
📍📍 Address 505 W. Vienna Street, Clio, MI 48420
📞📞 Phone Number (810) 686-5850
✉ Email Address [email protected]
Description
GSG provides Cybersecurity Services to deliver necessary security and enterprise services and tools including multiple specific technology and cybersecurity products that are core components of the City’s enterprise information infrastructure such as:
• IT Audit and Penetration Testing
• Red Team and Blue Team
• Endpoint Detection and Response (EDR)
• Network Detection and Response (NDR)
• Managed Defense and Response (MDR)
• Endpoint Protection
• Email Security - Anti-malware, AntiSPAM, Anti-Phishing, URL Sandboxing, URL Rewrite, Quarantine
• Firewall
• Incident Response Services
• Network Vulnerability Scanner
• Security Information Event Manager
(SIEM)
• Multifactor authentication
• Web Application Vulnerability Scanner
• Security Awareness - Training, Phishing
Simulation, etc.

GSG has implemented and configured the ServiceNow Technology Resource Management (TRM) capability to keep product information up-to-date, integrated technology data repositories, and designed effective processes for managing TRM changes. Our personnel have provided support to allow EAPO to adequately manage the modernized TRM and associated Commercial Off-The-Shelf (COTS) tools. This includes completing the implementation of the TRM tool, integrating remaining data sources, and demonstrating all automated processes to stakeholders and executives. In terms of demand management, GSG has implemented notifications at select milestones throughout the process and analyzed and validated interfaces and handoffs from the Demand Management portal to other processes, both internal and external to ServiceNow. GSG’s regular reports details activities during the reporting period, service tickets opened and closed, problems and corrective actions, new and pending issues, required government actions, and project schedules with major tasks, milestones, and deliverables.

GSG ensured readiness and effective communication for the release of new features and enhancements to the production environment. Our personnel have optimized the ideation and demand management portal through workflow modifications, detailed reports, dashboards, and timely notifications. Presentations to stakeholders include existing and enhanced data collection and workflow fields within the Demand Management ServiceNow Module, ensuring all enhancements meet user needs and expectations. Finally, GSG tested products with identified stakeholders and demonstrated tools to executives, ensuring that all new features and enhancements were thoroughly vetted and effectively communicated before they go live.

Page | 13
Reference 2: City of Rochester, MI
📅📅
Number of Years
Supported
Supported since June 13, 2024
Annual Cost: $53,320.00
Managed IT and Help Desk Services
• 24/7 Monitoring and Support: Proactive helpdesk for City employees and continuous monitoring for security threats with immediate remediation. • Infrastructure Management: Maintenance and management of City-wide infrastructure, including servers, networks, workstations, and virtualization. • Cybersecurity: Regular vulnerability assessments, penetration tests, and management of Intrusion Detection Systems (IDS) and firewalls.
• Data Management: Oversight of backup and DR solutions to ensure data integrity and confidentiality.
• Strategic Planning: Collaboration with City leadership on strategic IT roadmaps, budgeting, and technology forecasting.

Contact Information
👤👤 Contact Name Anthony Moggio, Finance Director / Treasurer 📍📍 Address 400 Sixth Street, Rochester, MI 48307
📞📞 Phone Number (248) 963-0750
✉ Email Address [email protected]
Description
GSG acts as a strategic partner to the City, managing all facets of its IT ecosystem to improve operational efficiency and cybersecurity resilience. This includes handling vendor relationships, negotiating technology contracts, ensuring regulatory compliance at all government levels, and providing regular reporting on IT health and security metrics to City leadership.
c. GSG’s Technology Partners
Provide a list of your company’s technology partners
GSG has several carefully chosen strategic partners including partner programs and firms where we are Value-Added Resellers (VAR). Each of our partner companies are leaders in their own IT space and collectively give GSG a direct line of access to leading IT developments which can increase productivity, reduce potential outside issues, and provide security solutions.  Microsoft Gold Certified AI and Cloud Partner - Provides access to full Microsoft stack services including cloud, identity management, endpoint protection, and enterprise integration.
 Amazon Web Services (AWS) and Microsoft Azure Certified Partner -Enables secure cloud-based infrastructure solutions, cloudnative assessment services, and data protection across hybrid environments.
 Oracle Partner Network Member - Offers direct integration and support for Oracle-based systems, security, and database applications.
 IBM Certified MSSP and Embedded Solutions Provider - Extensive capability to deliver IBM cybersecurity solutions including QRadar, Resilient, and Guardium

Page | 14
GSG offers access to best-in-class technologies across the threat lifecycle through partnerships with:
 Tenable – Risk-based vulnerability management and Active Directory threat detection (Tenable.ad).
 CrowdStrike, SentinelOne, Mandiant, and Trellix – Full-spectrum threat intelligence, endpoint protection, and rapid response.  Fortinet (Partner Program) – Access to FortiCloud, FortiManager, FortiSIEM, and FortiSandbox services.
 CyberArk – Privileged Access Management (PAM) solutions.  Palo Alto Networks, Cisco, and Zoom – Enterprise network, mobility, collaboration, and digital security services.  Tanium, ServiceNow, and Proofpoint – Endpoint management, asset visibility, automation, and secure messaging.
 Salesforce and Adobe – CRM and content-focused integrations.  Sonatype, AngularJS, Twilio, and Redgate – Extended developer support and DevSecOps tooling.
 Laserfiche – Industry-leading enterprise content management, workflow automation, and digital forms.

Page | 15

3. Staffing
a. Organizational Structure
Provide an organizational chart of your company that reflects reporting relationships.

GSG maintains a team of highly qualified IT and cybersecurity professionals with extensive experience supporting Managed IT Services, Help Desk Support, infrastructure management, network administration, and cybersecurity operations for public-sector and enterprise clients. Our personnel hold industry-recognized certifications and have successfully delivered similar IT services for more than ten years.

To support the City’s requirements, GSG provides scalable remote and on-site technical personnel for infrastructure support, troubleshooting, system administration, user support, and day-to-day IT operations. Our team will be led by Vishal Dave, Project Manager, who will oversee contract performance, service delivery, reporting, and coordination with City staff.

Supporting project execution, Vincent Fernandes – Managed Information Technology Services Provider will deliver on-site and remote technical support to ensure reliable, secure, and responsive IT operations. The organizational chart for the proposed team structure is provided below.
b. Support Team Structure
Describe all staff that will support the City, including executive, project, help desk support, system administrators, engineers and account staff.

GSG will assign a dedicated team of experienced IT professionals to support the City’s operational, infrastructure, cybersecurity, and end-user support requirements. Our support model combines executive oversight, account management, project coordination, help desk services, systems administration, network engineering, and cybersecurity expertise to ensure responsive and reliable service delivery.

The proposed team structure is designed to provide the City with both strategic leadership and hands-on technical support, ensuring continuity of operations, rapid issue resolution, proactive monitoring, and secure management of the City’s IT environment.

Page | 16
Executive Oversight and Contract Management
Name Role Responsibilities
Lisa
Salvador
Vice President –
Executive
Oversight
Executive sponsor responsible for overall contract
oversight, client relationship management, escalation
management, strategic coordination, and executive-level communications with City leadership. Provides
governance oversight and ensures contractual
performance, service quality, and customer satisfaction.

Account Management and Project Leadership
Name Position Experience Certifications Responsibilities Vishal
Dave
IT Project
Manager /
Account Manager
23+ Years CCNA, MCP,

MCAF, MAA
Primary point of contact
for the City. Responsible
for service delivery
management, project
coordination, reporting,
SLA management,
strategic planning,
resource coordination,
vendor management,
and operational oversight
of all support activities.

Help Desk & End-User Support Team
Name Position Experience Certifications Responsibilities Eric
McLaughlin
IT Services
Support Lead
21+ Years ITIL v4
Foundations,
CompTIA
Security+,
Network+,
Linux+, Juniper
JNCIA-Junos,
Cisco CCNA
Leads day-to-day help
desk operations and enduser support activities.

Provides advanced
troubleshooting for
desktop, remote access,
network connectivity,
operating systems, and
user support issues.

Supports escalation
management and
infrastructure
troubleshooting.

Daniel
Williams
IT Support
Engineer
10+ Years CompTIA A+,
Dell Certified
Technician,
Apple Certified
Technician,
JAMF 100
Administrator,
Google IT
Support
Professional
Certificate
Provides Tier I and Tier II
support for desktops,
laptops, printers, mobile
devices, Microsoft
applications, endpoint
deployments, and
hardware
troubleshooting.

Supports onsite user
assistance and
equipment setup
activities.

Page | 17
Systems Administration & Infrastructure Support
Name Position Experience Certifications Responsibilities Mark A.

Simmer
Senior Systems /
Network
Administrator
20+ Years CompTIA
Security+
Responsible for server
administration,
virtualization
environments, Active
Directory management,
backup systems,
infrastructure monitoring,
and network operations
support. Provides
advanced
troubleshooting and
operational continuity
support.

Vincent
Fernandes
Managed
Information
Technology
Services Provider
13+ Years Salesforce
Certified
Administrator –
ADM201
Salesforce
Advanced
Administrator –
ADM301
Responsible for
managing IT
infrastructure, cloud
services, enterprise
applications, vendor
coordination, network
administration, mobility
solutions, business
systems support, and
end-user technology
operations.

Wayne
Idalski
Systems and
Network
Administrator
20+ Years — Supports network
infrastructure, server
operations, user
administration, system
maintenance, patch
management, and
infrastructure reliability.

Assists with
troubleshooting and
operational support
across City locations.

Andrew
Boulton
Office 365
Engineer /
Systems
Administrator
12+ Years Cisco CCNA,
CompTIA
Network+
Responsible for Microsoft
365 administration, cloud
services support, email
systems, identity
management, remote
access technologies, and
systems integration
support.

Pratik
Agrawal
System Engineer 5+ Years MCSE, CSEP,

CCNP, CCNA
Supports network
engineering, server
administration, routing
and switching,
virtualization, endpoint

Page | 18
management, and
infrastructure deployment
activities.

Pritesh
Parikh
Network / System
Engineer
15+ Years Cisco Certified
(CCNA)
Provides network
infrastructure support
including routing,
switching, firewall
administration, wireless
connectivity, and
systems troubleshooting.

Supports infrastructure
upgrades and
operational support
initiatives.

Cybersecurity and Compliance Team
Name Position Experience Certifications Responsibilities Vatsal
Shah
Senior
Cybersecurity
Lead, Penetration
Tester, QSA (PCIDSS)
20+ Years PCIP, CCSK,

CISA, CEH,
CISSP, CISSPISSAP, GWAPT
Leads cybersecurity
strategy, vulnerability
management,
penetration testing,
compliance initiatives,
incident response
coordination, and
security assessments.

Provides guidance
related to CJIS, PCIDSS, and cybersecurity
best practices.

Kumar
Setty
Security Analyst 15+ Years CISSP, CISA,

CCSK, ITIL,

PCIP, AWS,
HCISSP
Supports security
monitoring, threat
analysis, compliance
activities, risk
assessments, security
operations, and security
event management.

Assists with policy
enforcement and
operational security
monitoring.

Rubin
Mehta
Incident
Response Analyst
10+ Years CEH, CCNA,
CCSP,
Security+, CSE,

ESM/SIM
Responsible for incident
response coordination,
threat detection, event
monitoring, forensic
analysis, and
remediation support for
cybersecurity incidents
and operational security
events.

Kalpesh
Unadkat
Cybersecurity
Architect
25+ Years CISSP, HIPAA,

CCNP, ITIL,
Provides cybersecurity
architecture oversight,

Page | 19
LEAN infrastructure security
design, governance
support, security
framework
implementation, and
strategic security
planning for enterprise
environments.

Service Delivery Approach
GSG’s proposed staffing model provides the City with:
• Dedicated executive oversight and contract governance • Experienced account and project management
• Responsive help desk and onsite support services
• Senior-level systems and network administration
• Specialized Microsoft 365 and virtualization expertise • Advanced cybersecurity monitoring and incident response capabilities • Scalable engineering resources for projects and infrastructure initiatives This blended support structure ensures the City receives responsive day-to-day operational support while also benefiting from senior engineering and cybersecurity expertise for complex technical and security-related matters.
c. Staff Retention Rate
Describe your annual staff retention rate during the past three years.

GSG maintained 95% retention rate among qualified
incumbents by prioritizing talent retention and workforce stability. Our Technical Staff averages ten years of industry work history and have multiple certifications. GSG’s
approach to staff retention comprises multiple components, as described below. Our retention practices comprise a systematic effort to create and foster an environment that encourages our employees to remain with us. The components of our retention strategy are as under:

GSG’s Retention Rates 2022-2025
2022 2023 2024 2025
91% 94% 95% 97%
The components of our retention strategy are as follows:
 Effective recruitment: We have found that successful retention begins early in the employeeemployer relationship. We seek out potential staff members who are in close fit with our client’s environments and projects, which more readily ensure client and staff satisfaction, as well as minimizing turnover and absenteeism.
 Competitive salaries: We offer competitive salaries that are reviewed annually through our salary review administration process. We reward our employees with compensation and benefit packages that are extremely competitive. Our salary ranges are based on professional surveys, enabling us to remain competitive in each geographic area. We are also committed to matching the current benefits of transferring employees, ensuring that employees do not lose out when they come to us.
 Better than industry standard benefits: We offer a comprehensive benefits package that includes health, vision, and dental insurance, 401(k) retirement plan, flexible savings account, reimbursement for gym expenses, relocation expenses, and employee referral and business lead bonus plans.
 Performance Bonuses: GSG offers year-end bonuses to team members who regularly provide outstanding service as reported through their supervisors and/or client feedback.

Page | 20
Through our disciplined and proven approach to recruitment, assignment, and retention, GSG ensures that the City receives not just qualified personnel — but committed professionals who stay, grow, and contribute meaningfully to long-term objectives. Our model reduces turnover, shortens ramp-up time, and strengthens project continuity — delivering sustained value to City’s mission.
d. Key Personnel Resumes
Provide the resume of any staff expected to work at the City office (e.g., the system administrator and/or network engineers).

We have provided the detailed resumes of our proposed personnel in Appendix I. e. Help Desk Staff Requirements
Describe your job requirements for helpdesk staff.

GSG requires Help Desk personnel to possess a combination of technical expertise, customer service skills, operational professionalism, and experience supporting enterprise IT environments.

Our staffing standards are designed to ensure that all support personnel can effectively respond to user requests, troubleshoot technical issues, and support the City’s operational and security requirements.

Section Requirements
Minimum
Education and
Experience
Requirements
• Associate’s degree or higher in Information Technology, Computer Science, or related technical discipline preferred.
• Minimum 2–5 years of Help Desk or Technical Support experience in enterprise or public sector environments.
• Experience supporting onsite and remote users in Windows-based environments.
• Experience utilizing ticketing and service management systems.

Technical Skill
Requirements
• Microsoft Windows desktop operating systems
• Microsoft 365 and Office applications
• Desktop and laptop troubleshooting
• Printers, scanners, and peripheral devices
• Active Directory administration
• Password resets and account provisioning
• VPN and remote access support
• Mobile devices and tablets
• Basic network troubleshooting
• VoIP systems
• Endpoint protection and antivirus solutions
• Advanced support knowledge preferred in:
o VMware/Hyper-V
o Terminal Services/Remote Desktop Services
o Network switches, routers, and wireless systems
o Backup and recovery processes
o Patch management systems
Customer
Service and
Communication
Requirements
• Strong verbal and written communication skills
• Professional customer service abilities
• Strong troubleshooting and analytical skills
• Ability to communicate technical concepts to non-technical users • Ability to work under pressure and manage multiple priorities

Page | 21
• Strong documentation and organizational skills
Certification
Requirements
• Preferred certifications include:
o CompTIA A+• CompTIA Network+
o Microsoft certifications
o ITIL Foundations
• Advanced certifications may include:
o Cisco CCNA
o Security+
o VMware certifications
o JAMF certifications
Background and
Security
Requirements
• Criminal background checks
• Employment verification
• Technical competency evaluations
• Reference checks
• Compliance with CJIS security and background screening requirements where applicable
Operational
Expectations
• Adherence to SLA response and resolution requirements • Accurate documentation of incidents and resolutions
• Proper escalation management
• Participation in ongoing training and certification programs • Compliance with confidentiality and security best practices • Support for after-hours and emergency response activities when required
This structured staffing approach ensures the City receives professional, technically capable, and customer-focused Help Desk support personnel capable of supporting day-to-day operations and critical service requirements.
f. Staff Training and Development Programs
Describe your staff development and training programs.

GSG maintains a comprehensive staff development and continuous training program designed to ensure that technical personnel remain current with evolving technologies, cybersecurity threats, industry best practices, and customer service expectations. Our training program combines formal technical certification programs, hands-on operational training, cybersecurity awareness education, and ongoing professional development initiatives.

Technical Training Program
GSG provides continuous technical training for all support personnel across core technology platforms and operational disciplines, including:
• Microsoft Windows Server and Microsoft 365 technologies • Network infrastructure and wireless technologies
• Virtualization platforms including VMware and Hyper-V • Cloud technologies and administration
• Backup and disaster recovery systems
• Endpoint management and mobile device support
• VoIP and telecommunications systems
• Remote access and VPN technologies
• Help desk tools and ticket management systems
• Patch management and endpoint security platforms

Page | 22
Training is delivered through:
• Vendor-sponsored technical courses
• Online learning platforms
• Hands-on lab environments
• Internal knowledge-sharing sessions
• Manufacturer certification programs
• Cross-functional mentoring
Certification Development
GSG actively encourages and supports employees in obtaining and maintaining industryrecognized certifications. Employees are provided with access to training resources, study materials, practice labs, and certification preparation programs.

Common certifications maintained by GSG personnel include:
• CompTIA A+, Network+, Security+, Linux+
• Microsoft certifications
• Cisco CCNA and CCNP
• VMware certifications
• ITIL Foundations
• CISSP, CEH, CISA, and related cybersecurity certifications Cybersecurity and Compliance Training
Because many client environments contain sensitive operational and public sector systems, GSG requires recurring cybersecurity and compliance training for all technical personnel.

Training topics include:
• Cybersecurity awareness and threat prevention
• Ransomware prevention and incident response
• Secure remote access practices
• Password and identity management
• Data protection and privacy practices
• Social engineering and phishing awareness
• CJIS security awareness (where applicable)
• PCI and compliance-related security practices
Security-related training is reinforced through:
• Simulated phishing exercises
• Security briefings
• Vulnerability awareness sessions
• Incident response tabletop exercises
Customer Service and Professional Development
GSG emphasizes strong communication and customer service skills as part of our support culture. Help Desk and technical staff receive training in:
• Professional communication
• Customer service best practices
• Ticket documentation standards
• Escalation management

Page | 23
• Time management and prioritization
• Conflict resolution and user interaction
Knowledge Transfer and Internal Collaboration
GSG promotes internal collaboration and operational consistency through:
• Team knowledge-sharing meetings
• Technical documentation standards
• Standard Operating Procedures (SOPs)
• Internal escalation reviews
• Post-incident reviews and lessons learned sessions
Senior engineers and subject matter experts routinely mentor junior staff to strengthen technical capabilities and ensure continuity of support services.

Performance Management and Continuous Improvement
Employee performance and development are continuously monitored through:
• Technical competency evaluations
• Training completion tracking
• Certification maintenance reviews
• Customer satisfaction feedback
• Service quality assessments
• Annual professional development planning
This structured development approach enables GSG to maintain a highly skilled, responsive, and security-focused technical team capable of supporting the City’s operational, infrastructure, and cybersecurity requirements.

Page | 24

4. Security
a. Does your company hold any security certifications? If so, list current certifications and the year each were originally obtained.

GSG maintains multiple internationally recognized security, quality, and service management certifications that demonstrate our commitment to cybersecurity, compliance, operational excellence, and protection of client data across federal, state, and local government environments.

GSG is ISO/IEC 27001:2022 certified for its Information Security Management System supporting cybersecurity and information assurance services provided to government clients. We have provided intensive documentation, including a detailed risk assessment, records of internal training, audits, managerial review, and documentation of the relevant controls and had our ISMS audited by an accredited body.

We are ISO 9001:2015 Certified for Quality Management Systems encompassing all processes supporting next-generation technology services including Cybersecurity, Enterprise Integrated Security, Electronic Content Management, Document Management, IT/Professional Support, as well as Application Development and Maintenance Support.

GSG has an ISO 20000-1:2018 Certified Service Management System supporting the provision of cyber security services, enterprise electronic content management services and application support services through its service delivery function and support functions.

GSG is also SOC 2 Type 2 compliant. Our internal control system for handling customer data meets high standards of security, availability, processing integrity, confidentiality, and privacy was audited this year by ACCORP Partners, an AICPA registered firm.

We are CMMI Maturity Level 3 appraised, our organizational standards provide guidance across our projects, programs, and portfolios. Our processes are proactive in addressing potential risks, and our processes are recognized for meeting world-class standards.

GSG is Cybersecurity Maturity Model Level 2 Certified. Our team has implemented all 110 security controls as outlined in NIST SP 800-171. This is a Department of Defense standard for contractors handling Controlled Unclassified Information and provides further validation of our ability to keep client data secure.

GSG is undergoing the Cybersecurity Maturity Model C3PAO-ML3 certification process and is waiting for DoD assessment approval.

GSG has US DoD Top-Secret Facility Clearance.

Given the sensitive nature of information required for SOC 2 Type 2, CMMI Level 3, and CMMC Level 2, details regarding those capabilities will be provided separately upon request and downselection.

Certification Originally Obtained Status
ISO/IEC 27001:2022 July 29, 2021 Active
ISO 9001:2015 July 29, 2022 Active
ISO 20000-1:2018 July 29, 2022 Active
Top Secret Facility Clearance April 23, 2026 Active

Page | 25
b. List any security certificates held by staff who may work on our account.

GSG maintains a highly qualified cybersecurity and infrastructure team with industry-recognized certifications supporting secure IT operations, cybersecurity governance, cloud security, compliance management, incident response, and enterprise infrastructure protection. Personnel assigned to support this engagement will possess relevant technical expertise and certifications aligned with the security and operational requirements of the engagement.

Key Cybersecurity
Personnel Role Experience Relevant Certifications
Vatsal Shah Senior Cybersecurity
Lead/QSA
20+ Years CISSP, CISA, CEH, PCIP,

CCSK, GWAPT
Kalpesh Unadkat Cybersecurity Architect 25+ Years CISSP, HIPAA, CCNP, ITIL Kumar Setty Security Analyst 15+ Years CISSP, CISA, CCSK, ITIL, AWS
Rubin Mehta Incident Response
Analyst
10+ Years CEH, CCSP, Security+,

SIM/ESM
Mark Simmer Senior Systems/Network
Administrator
20+ Years CompTIA Security+
Pratik Agrawal System Engineer 5+ Years MCSE, CSEP, CCNP, CCNA GSG’s technical personnel maintain certifications across cybersecurity operations, governance, cloud technologies, secure infrastructure management, risk management, compliance, and incident response disciplines. These certifications support GSG’s ability to deliver secure, compliant, and resilient IT services for government and enterprise environments. c. Describe background checks performed for all staff.

GSG maintains a rigorous employee screening and background verification program designed to ensure that all personnel assigned to client engagements meet high standards for integrity, professionalism, technical competency, and security compliance. Our screening procedures are aligned with the industry’s best practices and applicable employment regulations and are intended to support secure operations within government, nonprofit, and enterprise environments.

GSG utilizes a structured multi-stage evaluation and screening process to ensure candidates possess the qualifications, experience, reliability, and professionalism required to support sensitive and mission-critical environments.

INTERVIEWS CRIMINAL HISTORY
• Screening Interview: Used to determine if
a candidate has the qualifications
necessary for the job and qualify interest.
• In-Depth Interview: Assesses candidate
knowledge relative to requirements.
• Final Interview: Often this interview will
cover not only job knowledge, but also the
likelihood of the candidate “fitting” the
client’s work culture.
• Social Security Number Trace review to
confirm identifying information.
• County or state level searches.
• Federal Criminal National Record Search
• Sex Offender Registry Search

DRIVING RECORD EDUCATION VERIFICATION
May provide information such as full name
and physical description, as well as recent
moving traffic violations and accidents.

We contact the institution(s) where the most
relevant degrees were obtained. May report
dates of attendance, major or course of

Page | 26
study, degrees received and dates of
graduation.

VERIFY LICENSES AND CERTIFICATIONS CREDIT RATING
We contact the applicable state or national
licensing board or professional association.

We utilize a credit check when a position
requires security clearance and when
security/bonding requirements dictate.

SOCIAL MEDIA ANALYSIS TESTING PROCEDURES
Checking Facebook, LinkedIn, X (former
Twitter) and other social networking sites is
another area that is controversial. Many
states are moving to ban the practice at
some level or other. When we do conduct
this sort of analysis, we utilize only publicly
available information.

GSG’s employment testing is used to
measure job-related skills, abilities, and work
activities. GSG performs testing to predict
future job performance and selects
candidates based on the test results.

In addition to formal background screening, GSG validates candidate qualifications through employment verification, professional references, and technical evaluation processes to ensure only highly qualified personnel are assigned to client engagements.

For technical and cybersecurity roles, GSG prioritizes personnel holding industry-recognized certifications such as CISSP, CISA, CEH, Security+, CCNA, MCSE, AWS, ITIL, and related credentials supporting secure infrastructure, cybersecurity operations, and compliance management.

Only fully vetted and qualified personnel are authorized to support client environments, and access to systems and information is governed through role-based access controls, leastprivilege principles, and organizational security policies. d. Include your company’s security policies with regard to client access.

GSG maintains formal written cybersecurity, information security, and information privacy policies designed to protect client systems, networks, applications, and sensitive information from unauthorized access, misuse, disclosure, alteration, or disruption. These policies establish administrative, technical, and operational safeguards governing how client environments and data are accessed, managed, monitored, and protected across all service engagements.

GSG’s security policies apply to all employees, contractors, consultants, and authorized third parties who may access client systems or information. Access to client environments is strictly controlled through formal authentication, authorization, and access management procedures designed to support confidentiality, integrity, and availability of client information assets.

GSG maintains documented policies and procedures that include, but are not limited to, the following areas:

Security Policy Area GSG Security Controls and Practices Access Control and
Authorization
Access to client systems and information is restricted to authorized personnel based on job responsibilities and approved business needs.

GSG utilizes Role-Based Access Controls (RBAC), least-privilege principles, secure authentication procedures, and periodic access reviews to manage and monitor user access.

Information
Technology
Acceptable Use
All personnel are required to comply with acceptable use policies governing the secure and appropriate use of company and client technology resources, systems, networks, and data.

Information Privacy
and Data Protection
GSG maintains policies governing the protection, handling, storage, transmission, retention, and disposal of sensitive and confidential

Page | 27
information in accordance with applicable privacy and security requirements.

Multi-Factor
Authentication
(MFA)
GSG supports secure authentication practices through the implementation and administration of MFA for remote access, cloud platforms, email systems, and other critical environments where applicable.

Security Monitoring
and Risk
Management
GSG continuously monitors systems, user access activities, and security events to identify potential risks, unauthorized activity, and compliance issues.

Incident Response
and Reporting
GSG maintains formal incident response procedures for identifying, escalating, investigating, containing, and reporting cybersecurity incidents and unauthorized access events.

Compliance and
Continuous
Security Review
Security policies and controls are periodically reviewed and updated to align with evolving regulatory requirements, industry standards, emerging threats, and operational best practices.

GSG further enforces secure client access through:
• Unique user authentication and credential management
• Secure remote access technologies
• Controlled provisioning and deprovisioning procedures • Security awareness and acceptable use training
• Logging and monitoring of access-related activities
• Segregation of duties and access approval workflows
GSG’s cybersecurity and privacy practices support compliance with applicable standards and regulatory frameworks, including FERPA, HIPAA, NIST-aligned security controls, and other applicable privacy and security requirements where required by the engagement. e. Describe your strategy for securing your clients’ data.

GSG utilizes a defense-in-depth cybersecurity strategy focused on proactive prevention, continuous monitoring, rapid detection, secure recovery, and regulatory compliance. GSG’s approach integrates endpoint protection, SIEM/SOAR monitoring, vulnerability management, encryption, backup validation, disaster recovery, and continuous compliance auditing to protect sensitive client information and operational systems. This aligns directly with the City’s requirements for 24/7 monitoring, patch management, network security, backup oversight, and disaster recovery support. GSG secures client data through layered security controls that include:
• Advanced Endpoint Detection and Response (EDR/XDR)
• Network segmentation and firewall hardening
• Encryption for data at rest and in transit
• Secure cloud and hybrid infrastructure management
• Continuous vulnerability scanning and remediation
• Backup redundancy with immutable and air-gapped storage • Security patch management and configuration baselines • Compliance alignment with CJIS, PCI, HIPAA, CIS Controls, and NIST standards GSG also performs periodic penetration testing, configuration reviews, access audits, and policy compliance assessments to identify and remediate emerging risks before exploitation occurs.

GSG’s cybersecurity operations are designed to ensure operational continuity, minimize ransomware exposure, and protect critical municipal infrastructure.

Page | 28
Figure 1: GSG’s Defense in depth Cybersecurity Strategy i. How does your company stay informed regarding security alerts and/or events? GSG maintains continuous cybersecurity situational awareness through a combination of realtime monitoring platforms, threat intelligence subscriptions, vendor security advisories, government cybersecurity bulletins, and industry collaboration networks. GSG’s Security Operations personnel actively monitor alerts from CISA, FBI InfraGard, MS-ISAC, NIST, Microsoft Security Response Center, Cisco Talos, Palo Alto Networks, and other major cybersecurity intelligence providers to rapidly identify emerging threats and vulnerabilities relevant to client environments. GSG leverages centralized SIEM and monitoring platforms to aggregate and correlate logs from servers, endpoints, firewalls, cloud services, applications, and network devices. AI/ML-based analytics are utilized to identify anomalous activity, suspicious behavior, and potential indicators of compromise in real time. GSG conducts recurring threat intelligence reviews, vulnerability briefings, vendor update assessments, and security governance meetings to ensure clients remain informed about evolving cyber risks, regulatory changes, and remediation priorities.
ii. How does your company notify and manage security events for your clients? GSG follows a structured Incident Response and Security Event Management framework that emphasizes rapid detection, containment, communication, remediation, and recovery. Security events are prioritized based on severity, operational impact, and regulatory implications. GSG maintains documented escalation procedures, incident response playbooks, forensic analysis workflows, and client communication protocols to ensure timely resolution and transparency.

Upon identification of a security event, GSG immediately initiates:
• Incident triage and severity classification
• Threat containment and isolation procedures
• Root cause investigation and forensic analysis
• Stakeholder notification and escalation
• Recovery and remediation activities
• Post-incident reporting and lessons learned reviews
GSG provides clients with immediate notification for critical incidents and maintains continuous

Page | 29
communication throughout the response lifecycle. Automated SOAR workflows are used where applicable to accelerate containment and reduce response times. GSG also supports ransomware recovery, malware eradication, endpoint restoration, and regulatory reporting requirements when necessary.

Figure 2: GSG’s Security Event & Incident Response Framework iii. How does your company manage mobile device security? GSG secures mobile devices through centralized Mobile Device Management (MDM) and Mobile Threat Protection (MTP) capabilities designed to protect smartphones, tablets, laptops, and remote endpoints used across municipal environments. GSG’s mobile security strategy focuses on secure access, device compliance enforcement, data protection, and remote management while supporting operational mobility requirements. Our key mobile security capabilities include:
• Microsoft Intune and MDM policy administration
• Device encryption enforcement
• MFA-enabled remote access
• Conditional access controls
• Secure VPN connectivity
• Remote wipe and lock capabilities
• Mobile Application Management (MAM)
• Endpoint compliance monitoring
• BYOD governance and policy enforcement
GSG also monitors mobile devices for outdated operating systems, unauthorized applications, jailbreak/root conditions, and suspicious activity that could introduce risk into the client environment. Secure remote access policies ensure field personnel, law enforcement users, and remote workers maintain secure connectivity without compromising network integrity. iv. How does your company ensure best security practices are being followed? GSG ensures cybersecurity best practices are consistently followed through governance-driven security management, continuous compliance monitoring, recurring assessments, employee training, and alignment with recognized cybersecurity frameworks and regulatory standards. GSG incorporates security into operational procedures, change management, infrastructure administration, patch management, backup validation, and incident response activities to

Page | 30
maintain a mature security posture across client environments. GSG aligns the security operations with:
• NIST Cybersecurity Framework (CSF)
• CIS Critical Security Controls
• CJIS Security Policy
• ISO 27001 principles
• PCI DSS standards
• HIPAA security requirements where applicable
GSG conducts recurring vulnerability assessments, penetration testing, configuration audits, access reviews, backup validation testing, and policy compliance evaluations to verify adherence to security standards. GSG also provides cybersecurity awareness training, phishing simulations, and security education programs to reduce human-related cyber risks. Security governance reviews and operational reporting ensure leadership visibility into vulnerabilities, remediation status, system health, and compliance posture. This proactive governance approach supports continuous improvement and operational resilience.

Figure 3: GSG’s Cybersecurity Governance

Page | 31

5. Services
a. What desktop support do you provide to clients (hardware and software)? GSG provides end-to-end desktop lifecycle services covering installation, configuration, maintenance, and retirement of desktop PCs, laptops, thin clients, and associated peripherals such as printers, scanners, and imaging devices. Hardware services include device imaging, deployment, warranty coordination, hardware diagnostics, and replacement of failed components in coordination with the Original Equipment Manufacturer (OEM). On the software side, GSG installs and configures standard productivity suites (e.g., Microsoft 365), line-of-business municipal applications, secure browsers, endpoint protection, and remote-support agents on City workstations. GSG’s service desk provides remote and on-site troubleshooting for operating system issues, desktop application errors, profile corruption, printing problems, and performance degradation, using standardized runbooks to ensure consistent resolution. Workstations are onboarded using standardized images that include required security baselines, current patches, and City-approved applications, reducing time-to-deploy and ensuring configuration consistency across departments.
b. Describe the support you provide for network hardware and operating systems.

GSG provides administration, monitoring, maintenance, and optimization of network infrastructure including switches, routers, firewalls, wireless infrastructure, servers, virtualization platforms, and operating systems. Support encompasses Cisco, Juniper, and Ubiquiti network devices, Windows Server environments, Hyper-V, VMware ESX, SQL servers, VoIP systems, SCADA equipment, and cloud-connected infrastructure. Services include configuration management, firmware upgrades, network segmentation, performance monitoring, security hardening, backup validation, capacity planning, and infrastructure troubleshooting. The RFP environment specifically includes Cisco/Juniper/Ubiquiti equipment, VMware/Hyper-V, VoIP, Windows environments, and SCADA systems requiring ongoing management and monitoring.
c. Describe support you provide to end-users having problems with remote access to our systems.

GSG provides end-user support for remote connectivity issues involving VPNs, Terminal Services, remote desktops, cloud applications, smartphones, and secure remote access platforms. Services include diagnosing authentication failures, latency issues, MFA enrollment problems, device compliance issues, VPN tunnel instability, and remote application access errors.

GSG also supports secure Zero Trust Network Access (ZTNA), mobile device connectivity, and remote workforce enablement while ensuring compliance with CJIS and cybersecurity requirements.
d. Describe your work order/ticket system.

GSG utilizes centralized IT Service Management (ITSM) and ticketing platforms to log, categorize, prioritize, track, escalate, and resolve service requests and incidents. The system supports automated ticket routing, SLA tracking, knowledge base integration, asset association, workflow automation, reporting dashboards, and customer communications. Tickets are categorized by severity, business impact, and technical domain to ensure appropriate response prioritization.

GSG’s ticketing environment supports incident management, request fulfillment, problem management, and change management processes while maintaining complete audit trails and historical reporting.
e. Describe your system to escalate chronic or advanced problems.

GSG follows a structured multi-tier escalation framework consisting of Tier I, Tier II, and Tier III support teams. Initial service desk personnel perform intake, troubleshooting, and issue triage

Page | 32
before escalating unresolved or specialized issues to systems administrators, network engineers, cybersecurity specialists, or vendor support teams. Chronic issues are tracked through problem management processes to identify root causes, recurring patterns, and long-term remediation strategies. Escalations are governed through predefined SLA thresholds, severity classifications, and management oversight to ensure timely resolution and accountability.

Figure 4: GSG’s Escalation Framework
f. Describe the hours of operation for the help desk staff and the guarantee call response time.

GSG provides 24/7/365 help desk, monitoring, and technical support services through a combination of centralized service desk operations, remote support personnel, and on-call field technicians. Support is available during normal business hours as well as after-hours, weekends, and holidays to ensure uninterrupted coverage for the City of Livingston’s IT environment and critical municipal operations.

Help desk requests are managed through a structured ticketing and escalation process with response times governed by service-level agreements (SLAs) based on issue severity and operational impact.

Guaranteed Response Times:
• Critical / Priority 1 (system outage, public safety or major business disruption): Immediate acknowledgement and escalation, with response within 15 minutes, including after-hours support.
• High Priority / Priority 2 (significant service degradation): Response within 30–60 minutes.
• Routine / Priority 3-4 service requests and non-critical issues: Response within 4 business hours or according to established service windows.

When required, GSG provides after-hours onsite and remote support to address incidents that cannot be resolved remotely, ensuring continuity of operations and rapid restoration of services.

This support model aligns with the City’s requirement for 24/7/365 monitoring, help desk support, and after-hours onsite and remote assistance.

Page | 33
g. Provide help desk statistics such as average time to respond to calls, average length of time for successful resolution of issues, the nature of the support calls, etc.

GSG maintains operational metrics and KPI reporting for service desk performance including average response time, first-call resolution rate, ticket aging, escalation rates, closure timelines, SLA compliance, call abandonment rates, and customer satisfaction. Support requests commonly involve password resets, workstation issues, software troubleshooting, network connectivity, remote access problems, printer support, email issues, security alerts, and infrastructure incidents. Reporting is delivered through dashboards and recurring operational reviews. h. Describe availability of other key staff during normal business hours, including systems administrators and engineers with areas of expertise such as Terminal Server.

GSG provides access to dedicated systems administrators, network engineers, cloud specialists, cybersecurity personnel, virtualization engineers, database administrators, and project managers during standard business hours. Specialized expertise includes VMware, Hyper-V, Microsoft Exchange, SQL Server, Active Directory, cloud services, Terminal Services, cybersecurity operations, and enterprise networking. Staff availability is coordinated through centralized scheduling and escalation management to ensure continuous technical coverage. i. Describe after-hours support. What is the guaranteed response time? How is your afterhours response time structured (e.g., time of day, severity)? What is the average response time?
GSG provides after-hours remote and onsite support for emergency incidents, infrastructure failures, cybersecurity events, and critical operational disruptions. Response timelines are based on severity classifications, with mission-critical outages receiving immediate engagement and escalation. After-hours services include network troubleshooting, server recovery, incident response, backup restoration, emergency patching, and coordination with third-party vendors, as necessary. The RFP specifically requires 24/7/365 after-hours onsite and remote support capabilities.

Figure 5: GSG’s After-hours Support

Page | 34
j. Are there any penalties for your company if the guaranteed response times are not met? GSG typically operates under performance-based SLAs that define response, escalation, and resolution expectations. Failure to meet agreed performance metrics may trigger corrective action plans, service credits, contract reviews, or performance improvement measures depending on contract terms. GSG emphasizes proactive monitoring, automated alerting, and staffing redundancy to minimize SLA violations and maintain operational continuity. k. Describe the on-site support representative responsibilities and recommended schedule (hours per week/month).

GSG’s Onsite support responsibilities include workstation setup, hardware replacement, printer configuration, cable management, user onboarding/offboarding, local troubleshooting, software installations, infrastructure coordination, conference room technology support, and physical deployment services. Onsite personnel also coordinate with remote engineering teams for advanced troubleshooting and project implementation activities. Recommended schedules are tailored based on client operational requirements and may include recurring weekly onsite presence combined with on-demand emergency dispatch support. l. Describe specific help desk staff skill sets to support advanced issues with programs such as Terminal Server, Exchange, VMWare and applications support (e.g., operating system issues or MS Office issues).

GSG help desk personnel possess expertise supporting VMware, Hyper-V, Microsoft Exchange, Microsoft 365, Active Directory, SQL Server, Windows operating systems, Office applications, Terminal Services, endpoint security platforms, and cloud-connected applications. Advanced support staff include systems administrators, virtualization engineers, cybersecurity specialists, and network engineers capable of troubleshooting enterprise infrastructure and application issues.
m. Describe any training your organization provides to your clients, including network applications and/or desktop applications. (Or are you affiliated with an organization that provides training to clients?)
GSG provides technical and cybersecurity training programs for end users, administrators, and executive personnel. Training services include phishing awareness, cybersecurity best practices, Microsoft 365 usage, document management systems, CRM platforms, secure remote access, and operational procedures. Training delivery methods include onsite instruction, virtual sessions, workshops, knowledge transfer sessions, and recurring awareness campaigns. n. Describe any systems-backup support you offer.

GSG provides backup administration, monitoring, validation, restoration testing, retention management, and encrypted cloud backup services. Backup operations include daily incremental backups, periodic full backups, air-gapped storage, replication monitoring, and integrity verification. Backup support encompasses servers, virtual machines, cloud workloads, databases, and endpoint systems while ensuring compliance with continuity and recovery objectives. The RFP specifically requires management and support of disaster recovery systems and backups.
o. Describe any disaster recovery support provided.

GSG develops and maintains disaster recovery and business continuity capabilities including recovery planning, backup restoration, infrastructure failover, incident coordination, DR testing, and operational recovery procedures. Services include recovery objective planning, continuity exercises, cloud failover strategies, and post-incident restoration support to minimize operational disruptions.

Page | 35
p. Describe how major software upgrades will be applied. Are there extra fees for upgrades? If so, please describe.

GSG manages major software upgrades through structured change management processes that include testing, compatibility validation, scheduling, deployment planning, rollback procedures, and post-implementation support. Upgrades are coordinated with client stakeholders to minimize operational disruptions and are typically performed during approved maintenance windows. Costs for upgrades are generally dependent on software licensing requirements, vendor support agreements, infrastructure impacts, and project scope.
q. Describe patch management – how software updates and patches are performed both on servers and desktops. Who is responsible doing updates? How often are they done? If using automated tools, what program is being used to rollout the updates and what programs are being updated?
GSG performs centralized patch management for servers, desktops, virtualization platforms, and enterprise applications using automated deployment and monitoring tools. Services include vulnerability assessment, patch testing, deployment scheduling, rollback management, compliance reporting, and verification of successful installations. Patches are applied regularly based on severity, vendor release cycles, and operational requirements while emergency patches are expedited for critical vulnerabilities. The RFP specifically requires network security monitoring, security updates, patch management, and weekly reporting activities. r. How are network down-times for maintenance scheduled and communicated? GSG schedules maintenance activities during approved maintenance windows outside normal business hours whenever possible to minimize operational impact. Planned outages are communicated through advance notifications, maintenance advisories, email alerts, ticketing systems, and coordination meetings with stakeholders. Emergency maintenance procedures include rapid notifications, escalation protocols, and continuous status updates until service restoration is completed.

Page | 36

6. Monitoring
a. Describe your tools and strategies to monitor and ensure the stability of the computing environment.

GSG utilizes a layered monitoring and operational management strategy designed to ensure continuous availability, performance optimization, and cybersecurity protection across municipal IT environments. In alignment with the City’s requirement for 24/7/365 monitoring, network security management, patch management, disaster recovery, and infrastructure support, GSG employs enterprise-grade Remote Monitoring and Management (RMM), SIEM, and endpoint analytics platforms to proactively identify and remediate issues before service disruption occurs.

GSG’s monitoring stack includes SolarWinds and Splunk for infrastructure and log monitoring, ServiceNow for ITSM and workflow orchestration, Palo Alto Cortex XSIAM for AI-driven SIEM/SOAR capabilities, and New Relic for application and performance analytics. These tools continuously monitor servers, endpoints, firewalls, wireless infrastructure, virtualization environments, cloud services, backups, VoIP systems, and remote devices. AI/ML-based analytics are leveraged to identify anomalous behaviors, unauthorized access attempts, bandwidth abnormalities, hardware degradation, and potential ransomware indicators in real time.

GSG’s strategies include:
• 24/7/365 infrastructure and endpoint monitoring.
• Automated alerting for device failures, threshold breaches, and cybersecurity incidents. • Centralized log aggregation and correlation across cloud, network, SaaS, and endpoint environments.
• Proactive patch and vulnerability management using WSUS, SCCM, and automated deployment tools.
• Backup health monitoring and validation testing.
• Capacity utilization analysis and predictive maintenance. • Continuous monitoring of CJIS-sensitive environments using role-based access and audit logging controls.

Figure 6: GSG’ s layered monitoring & operating Management Strategy

Page | 37
b. Describe how monitoring results will be communicated to the City.

GSG will provide the City with transparent, real-time, and executive-level visibility into the operational health and security posture of the City’s IT environment through automated reporting, dashboards, service reviews, and escalation notifications. Monitoring outputs will be communicated through multiple channels to ensure City leadership, department managers, and technical stakeholders remain informed regarding system status, incidents, vulnerabilities, and remediation activities. Communication methods include:
• Real-time automated alerts for critical outages, cybersecurity events, backup failures, and infrastructure degradation.
• Weekly operational reports summarizing monitoring events, ticket activity, patch compliance, endpoint health, and maintenance activities.
• Monthly executive dashboards highlighting SLA performance, uptime trends, security incidents, capacity utilization, asset health, and remediation metrics. • Quarterly strategic reviews to discuss trends, risks, technology improvements, lifecycle planning, and recommendations.
• Immediate escalation notifications for Priority 1 security or operational incidents. • ServiceNow portal access for ticket visibility, reporting, and issue tracking.

Dashboards and visualizations provide actionable insights into:
• Server and network uptime.
• Endpoint compliance.
• Security alert trends.
• Backup and disaster recovery health.
• Patch management status.
• Incident response metrics.
• User support analytics.

GSG also conducts routine review meetings with City leadership to discuss infrastructure performance, operational concerns, planned maintenance windows, security risks, and recommendations for modernization initiatives.

Page | 38
Figure 7: GSG’s Result Monitoring

Page | 39

7. Management and Documentation
a. Describe how you will report about status of systems, needs of users, needs for change, etc.

GSG utilizes a structured governance and service delivery framework to provide continuous visibility into system performance, operational requirements, user needs, and technology improvement opportunities. Reporting is delivered through recurring operational reviews, executive summaries, ITSM dashboards, strategic planning sessions, and ticket analytics.

Routine reporting includes:
• Weekly operational summaries covering ticket activity, open issues, maintenance tasks, patch deployment status, monitoring alerts, and system availability. • Monthly management reports detailing infrastructure health, SLA compliance, incident trends, recurring support issues, cybersecurity posture, and resource utilization. • Quarterly business and technology reviews focused on lifecycle management, risk reduction, budgeting priorities, cloud modernization opportunities, disaster recovery readiness, and strategic IT recommendations.

GSG’s integrated ticketing and demand management platforms allow trends and recurring deficiencies to be identified proactively. The reporting process helps City leadership understand:
• Emerging operational risks.
• End-user pain points.
• Capacity and performance concerns.
• Hardware refresh requirements.
• Security vulnerabilities.
• Opportunities for automation and cloud optimization.

GSG provides strategic recommendations aligned with municipal operational priorities, compliance obligations, and budget considerations.

Figure 8: Governance & Reporting Framework

Page | 40
b. Describe how you will propose changes in technicians assigned to the contract.

GSG follows formalized personnel management and transition methodology to ensure continuity of operations and minimal disruption when staffing adjustments are required. Any proposed changes to technicians, engineers, or support personnel assigned to the City contract will be communicated proactively to designated City stakeholders. Our process includes:
• Advance notification and justification for staffing changes. • Submission of replacement personnel qualifications and certifications. • Structured knowledge transfer activities between outgoing and incoming staff. • Transition overlap periods when necessary to preserve operational continuity. • Updated organizational charts and escalation matrices. • Review and approval coordination with City leadership.

GSG maintains cross-trained support teams and documented Standard Operating Procedures (SOPs) to ensure uninterrupted support services. Personnel transitions are managed under predefined milestones, and service continuity plans to avoid operational impact to City systems and end users. GSG emphasizes long-term staff retention, technical training, CJIS compliance readiness, and municipal support experience to ensure consistency and familiarity with the City’s environment.
c. Describe any IT strategic planning provided.

GSG provides comprehensive IT strategic planning services designed to align technology investments with organizational goals, operational resilience, cybersecurity requirements, and long-term modernization initiatives. Strategic planning services are tailored to municipal environments and incorporate infrastructure optimization, cloud transformation, cybersecurity maturity, disaster recovery readiness, compliance alignment, and budget forecasting. Our Strategic planning services include:
• Development of multi-year IT roadmaps.
• Infrastructure lifecycle and refresh planning.
• Cybersecurity maturity assessments.
• Cloud migration and hybrid infrastructure planning.
• Business continuity and disaster recovery strategy development. • Asset lifecycle and capacity planning.
• Technology budgeting and forecasting.
• Risk and compliance assessments.
• Network modernization planning.
• CJIS, PCI, and regulatory compliance advisory support.

GSG collaborates directly with City leadership and departmental stakeholders to evaluate operational priorities, emerging technology needs, and future scalability requirements.

Recommendations are prioritized based on risk reduction, operational efficiency, budget constraints, and long-term sustainability.

Page | 41

8. Documentation, Record Keeping and Reporting
a. Describe your routine reporting procedures for information provided to the City.

GSG follows standardized reporting procedures that provide the City with consistent visibility into operational activities, support performance, cybersecurity status, infrastructure health, and project progress. Reporting is structured to support both technical personnel and executive leadership decision-making. Our Routine reporting includes:
• Weekly operational activity reports.
• Monthly service delivery and SLA performance reports. • Quarterly program and strategic review meetings.
• Real-time ticket and incident tracking through ServiceNow. • Maintenance and patch management summaries.
• Backup and disaster recovery validation reports.
• Cybersecurity monitoring and vulnerability assessment summaries. • Asset inventory and lifecycle reports.

Our Reports typically include:
• Work completed.
• Outstanding tasks and remediation activities.
• Incident and ticket metrics.
• Security alerts and response activities.
• Infrastructure performance statistics.
• Resource utilization trends.
• Recommendations and improvement opportunities.
b. Describe how you will document and record maintenance, installation, performance and changes to the system.

GSG maintains comprehensive technical documentation and configuration management processes to ensure all maintenance activities, installations, infrastructure modifications, and operational changes are properly recorded, auditable, and recoverable. Our Documentation processes include:
• Configuration Management Databases (CMDBs).
• Standard Operating Procedures (SOPs).
• Change management logs.
• Maintenance and installation records.
• Network topology diagrams.
• Asset inventories and warranty tracking.
• System baselines and configuration snapshots.
• Incident and remediation documentation.
• Patch deployment records.
• Backup validation logs.
• DR procedures.

All changes follow formal change management workflows with approval, testing, rollback planning, and post-implementation validation. Documentation is securely maintained within centralized ITSM and configuration management platforms. This structured documentation process supports operational continuity, compliance auditing, disaster recovery preparedness,

Page | 42
and efficient troubleshooting.
c. Describe the documentation that you will make available to the City at the end of the contract period to assist with transition, if necessary.

At the conclusion of the contract period, GSG will provide comprehensive transition and knowledge transfer documentation to ensure a seamless operational handoff to the City or successor provider. All documentation will be organized, current, and validated prior to transition activities. Our Deliverables include:
• Network architecture diagrams.
• System inventories and asset records.
• Server and endpoint configuration documentation.
• Backup and disaster recovery procedures.
• Administrative and operational SOPs.
• Security configuration baselines.
• Maintenance and patch history records.
• Licensing and warranty documentation.
• Vendor contact lists.
• Escalation procedures.
• Knowledge transfer documents and runbooks.
• Active project status reports.
• Ticket history and operational metrics.
• Transition checklists and traceability matrices.

GSG typically provides formal knowledge transfer sessions sixty and thirty days prior to contract expiration to ensure continuity and minimize operational risk.

Page | 43

9. Transition Plan
GSG will implement a structured, low-risk transition plan to onboard the City’s IT environment while ensuring continuity of operations, security compliance, and minimal disruption to City staff.

Given the City’s multi-location environment, public safety systems, CJIS compliance requirements, and 24/7 support expectations, the transition will be executed in phased stages with defined milestones and communication checkpoints.

Phase 1: Transition Initiation and Project Kickoff (Week 1) Objective: Establish governance, communication, and transition readiness.

Activities:
• Conduct formal kickoff meeting with City leadership and designated stakeholders. • Confirm project governance structure, escalation paths, and communication protocols. • Assign GSG transition team, including:
o Transition Manager
o Service Delivery Manager
o Lead Systems Engineer
o Security/Compliance Specialist
o Help Desk Lead
• Review contractual scope, service levels, reporting expectations, and responsibilities. • Establish transition timeline with milestone approvals. • Coordinate with incumbent IT provider for knowledge transfer planning.

Deliverables:
• Transition project plan
• Communication matrix
• Escalation matrix
• Stakeholder contact directory
Phase 2: Discovery and Environment Assessment (Week 1–2) Objective: Gain full visibility into the City’s IT infrastructure and operational environment.

Activities:
• Comprehensive infrastructure discovery across all six City locations. • Inventory validation of:
o ~105 desktops/laptops
o ~5 servers
o tablets/mobile devices
o VoIP systems
o routers, switches, firewalls
o cloud and local backup systems
o SCADA-connected infrastructure
o public safety systems
o Live Scan systems
o VMware/Hyper-V environments
o remote connectivity systems
• Review current network topology, configurations, licenses, warranties, and documentation. • Assess security posture, patch status, antivirus coverage, and backup integrity. • Review help desk ticket history to identify recurring issues and operational trends. • Validate third-party vendor relationships and application dependencies.

Page | 44
Deliverables:
• IT environment assessment report
• Asset inventory baseline
• Risk and gap assessment
• Dependency register
Phase 3: Security and Compliance Readiness (Week 2)
Objective: Ensure operational and regulatory readiness before assumption of support.

Activities:
• Background checks and fingerprinting coordination for personnel accessing public safety systems.
• Execution of CJIS Security Addendum.
• Validation of CLETS/FBI CJIS compliance procedures.
• Establish unique administrator credentials for assigned personnel. • Review access controls and privileged account management. • Confirm endpoint protection, patch management, MFA, and backup monitoring readiness. • Incident response procedure alignment.

Deliverables:
• Security readiness checklist
• Access control register
• Compliance validation documentation
Phase 4: Knowledge Transfer and Documentation Transition (Week 2–3) Objective: Transfer operational knowledge from incumbent provider and formalize documentation.

Activities:
• Obtain administrative credentials and system access.
• Collect and validate:
o network diagrams
o server documentation
o ISP/provider contacts
o software licensing records
o backup procedures
o vendor contracts
o escalation procedures
o monitoring alerts
o telephony configurations
• Review known incidents, unresolved tickets, and recurring issues. • Validate disaster recovery procedures.

Deliverables:
• Consolidated documentation repository
• Knowledge transfer completion checklist
• Open issue register

Page | 45
Phase 5: Tool Deployment and Service Configuration (Week 3) Objective: Establish operational monitoring and service management framework.

Activities:
• Deploy/configure:
o RMM monitoring tools
o help desk ticketing platform
o alerting and escalation workflows
o patch management automation
o endpoint security monitoring
o backup monitoring dashboards
o reporting templates
• Configure asset tracking and warranty management.
• Establish 24/7 monitoring and after-hours support workflows.

Deliverables:
• Monitoring operational dashboard
• Help desk portal activation
• Reporting framework
Phase 6: Pilot Support/Parallel Operations (Week 3–4)
Objective: Validate service readiness before full production handoff.

Activities:
• Begin limited support in coordination with incumbent provider. • Test:
o ticket intake and response workflows
o escalation procedures
o remote support connectivity
o onsite dispatch readiness
o backup alert response
o security incident workflows
• Resolve transition-related issues prior to go-live.

Deliverables:
• Pilot performance report
Phase 7: Full-Service Go-Live (Week 4)
Objective: Seamless transition to full managed IT operations.

Activities:
• Assume full responsibility for:
o help desk support
o infrastructure monitoring
o server/network administration
o patching and updates
o backup monitoring
o endpoint protection
o vendor coordination
o onsite support

Page | 46
o after-hours emergency response
• Provide enhanced transition support during initial stabilization.

Deliverables:
• Go-live confirmation
• Operational support activation
Phase 8: Stabilization and Continuous Improvement (First 30–60 Days) Objective: Optimize service delivery and align with City priorities.

Activities:
• Weekly operational review meetings.
• Review recurring incidents and service trends.
• Fine-tune monitoring thresholds and escalation rules. • Identify remediation opportunities and strategic improvements. • Deliver reporting on:
o ticket metrics
o patch compliance
o monitoring events
o security observations
o asset lifecycle concerns
Deliverables:
• Weekly status reports
• 30-day transition review
• improvement roadmap
Estimated Transition Timeline
Figure 9: Transition Timeline
Transition Commitment
GSG’s transition methodology is designed to ensure zero critical service disruption, secure operational handoff, full compliance with public sector security requirements, and rapid stabilization of the City’s IT environment while supporting the City’s leadership objectives for reliability, responsiveness, and strategic technology management.

Page | 57

12. Miscellaneous
a. Provide any other certifications, credentials and licenses you think are relevant for our consideration (specify if held by the company or an employee).

GSG maintains a broad portfolio of organizational certifications, security compliance credentials, technical partnerships, and employee-held industry certifications that support the delivery of secure, reliable, and high-quality IT and cybersecurity services for government, nonprofit, and enterprise clients.

The following certifications, credentials, and licenses are considered relevant to City:

Certification/
Credential Held By Relevance
ISO/IEC 27001:2022 Company Information Security Management System (ISMS) certification supporting cybersecurity and information
security operations
ISO 9001:2015 Company Quality Management System certification supporting standardized service delivery and operational
excellence
ISO 20000-1:2018 Company IT Service Management System certification supporting secure and efficient service management practices
SOC 2 Type 2 Company Independent validation of security, availability, confidentiality, and privacy controls
CMMI Maturity Level
3 Company Appraised organizational maturity supporting
standardized project and service delivery processes
CMMC Level 2 Company Implementation of NIST SP 800-171 security controls supporting protection of Controlled Unclassified
Information (CUI)
U.S. DoD Top Secret
Facility Clearance
Company Authorized facility clearance supporting secure federal government operations
Microsoft Gold
Certified Partner – AI
and Cloud Services
Company Advanced Microsoft cloud and technology
implementation capabilities
CISSP (Certified
Information Systems
Security
Professional)
Employees Advanced cybersecurity architecture, governance, and risk management expertise
CISA (Certified
Information Systems
Auditor)
Employees Information systems auditing, compliance, and control expertise
CEH (Certified
Ethical Hacker)
Employees Cybersecurity testing, vulnerability assessment, and threat analysis expertise
CCSP/CCSK Employees Cloud security and cloud governance expertise Security+ Employees Foundational cybersecurity operations and security administration expertise
CCNA/CCNP Employees Enterprise networking and secure infrastructure management expertise
MCSE/Microsoft
Certifications
Employees Microsoft systems administration and cloud platform expertise
AWS Certifications Employees Cloud architecture, deployment, and security management expertise

Page | 58
ITIL Employees IT service management and operational process governance expertise
PMP/Scrum
Certifications
Employees Project management and agile delivery methodology expertise
b. Describe what makes your company unique in its ability to support the City’s IT initiatives and infrastructure.

GSG distinguishes itself through a combination of public sector experience, highly qualified technical personnel, responsive service delivery, and a strong cybersecurity-focused support model. Our organization provides comprehensive managed IT services designed to support operational continuity, infrastructure stability, cybersecurity resilience, and long-term technology planning for municipal environments.

Why GSG Value to the City
Proven Public
Sector
Experience
GSG has extensive experience supporting government and public sector organizations with managed IT services, cybersecurity, infrastructure management, and help desk operations. We understand the importance of operational continuity, responsiveness, compliance, and secure technology environments.

Comprehensive
Managed IT
Services
GSG delivers end-to-end IT support services including help desk support, network administration, systems management, cloud support, cybersecurity, backup and disaster recovery, monitoring, and strategic IT planning through a single integrated support model.

Highly
Experienced
Technical Team
Our team consists of certified engineers, system administrators, cybersecurity specialists, and support personnel with extensive experience supporting enterprise and municipal IT environments. Proposed personnel average more than fifteen years of technical experience.

CybersecurityFocused
Approach
Security is integrated into every aspect of our service delivery model, including patch management, endpoint protection, vulnerability management, backup validation, monitoring, incident response, and infrastructure hardening.

Responsive
and Scalable
Support Model
GSG provides responsive onsite and remote support backed by scalable engineering resources, allowing the City to quickly access specialized expertise when needed without increasing internal staffing costs. 24/7 Monitoring
and Support
Capabilities
Our proactive monitoring and support services help minimize downtime, improve system reliability, and ensure rapid response to operational or security-related incidents.

Strong
Technical
Expertise
GSG supports a broad range of technologies including Microsoft environments, VMware/Hyper-V, VoIP systems, cloud platforms, Cisco/ Juniper/Ubiquiti networking, endpoint management, and remote access technologies.

Process-Driven
Service
Delivery
We utilize structured service management processes, ticketing systems, escalation procedures, documentation standards, reporting practices, and SLA-driven support models to ensure consistent and reliable service delivery.

Strategic
Technology
Partnership
GSG functions as a long-term technology partner by assisting clients with IT modernization, infrastructure planning, budgeting guidance, lifecycle management, and continuous operational improvements.

Commitment to
Customer
Service
GSG emphasizes professionalism, communication, accountability, and customer satisfaction in every aspect of service delivery, ensuring a collaborative and responsive partnership with the City.

Page | 59
c. How many employees hold a current CJIS Security Certificate? GSG has seven employees who hold a current CJIS Security Certificate. d. Describe your company’s familiarity with the CJIS Security Policy.

GSG maintains comprehensive security policies, procedures, and technical safeguards designed to protect client systems, networks, applications, and sensitive information from unauthorized access, disclosure, alteration, or disruption. Our security framework is aligned with industry best practices and regulatory standards, including CJIS, NIST, HIPAA, PCI-DSS, and other applicable cybersecurity requirements.

GSG utilizes a layered security approach that combines administrative controls, technical safeguards, personnel screening, access management, continuous monitoring, and incident response procedures to ensure secure and compliant access to client environments.

Security Area GSG Security Policies and Practices
Access Control
Policies
GSG enforces strict RBAC policies to ensure personnel are granted access only to systems and information required to perform assigned job responsibilities. Access privileges are reviewed regularly and immediately revoked upon employee separation or role changes.

Authentication
and Security
Controls
GSG utilizes strong authentication mechanisms including MFA, complex password standards, account lockout protections, privileged access management, and secure remote access controls for all client environments.

Least Privilege
Principle
All personnel are assigned the minimum level of access necessary to perform their duties. Administrative privileges are tightly controlled, monitored, and documented.

Remote Access
Security
Secure remote access connections are protected through encrypted VPN technologies, MFA enforcement, endpoint security validation, and session monitoring. Remote support access is restricted to authorized personnel only.

Employee
Screening and
Background
Checks
All technical personnel undergo employment verification, criminal background screening, reference checks, and technical competency evaluations prior to supporting client environments. Additional CJIS or law enforcement background checks are completed where required.

CJIS
Compliance
Experience
GSG has extensive experience supporting CJIS-compliant environments for municipal and county governments. Our personnel are familiar with CJIS Security Policy requirements, secure access procedures, logging requirements, security awareness training, and law enforcement data handling standards.

Security
Awareness
Training
All personnel participate in ongoing cybersecurity awareness and compliance training covering phishing prevention, secure data handling, password management, incident reporting, remote access security, and regulatory compliance requirements.

Logging and
Monitoring
GSG implements logging, monitoring, and auditing procedures to track system access, administrative activities, security events, and unauthorized access attempts. Security events are reviewed and escalated according to established incident response procedures.

Data Protection
and Encryption
Sensitive client data is protected through encryption technologies for both data-at-rest and data-in-transit. GSG follows secure data handling and retention practices to protect confidential and regulated information.

Endpoint and GSG deploys endpoint protection, antivirus, patch management, device

Page | 60
Device Security monitoring, and security hardening practices across supported systems and devices to reduce operational and cybersecurity risk.

Incident
Response
Procedures
GSG maintains documented incident response procedures to identify, contain, investigate, remediate, and report security incidents in a timely and controlled manner.

Compliance
and Regulatory
Support
GSG has experience supporting compliance initiatives aligned with CJIS, HIPAA, PCI-DSS, IRS-1075/1070, and NIST cybersecurity standards for public sector and regulated environments.

CJIS and Public Safety Experience
GSG has direct experience supporting CJIS-related environments and law enforcement agencies across multiple jurisdictions. Our experience includes:
• Providing CJIS-compliant managed IT services for municipalities and county governments. • Supporting LEIN-CJIS compliant environments in Michigan. • Conducting CJIS policy and compliance assessments.
• Supporting law enforcement infrastructure, remote access systems, and secure records management environments.
• Implementing technical safeguards including MFA, encryption, endpoint protection, and access controls aligned with CJIS Security Policy requirements.

GSG understands the importance of protecting Criminal Justice Information (CJI), Personally Identifiable Information (PII), and other sensitive government data through secure operational practices, controlled access procedures, and proactive cybersecurity management. e. Describe your organization’s technology stack, ranging from BDR/RMM/PSA to Endpoint Protection and secure email gateways.

GSG utilizes a modern enterprise technology stack designed to provide proactive monitoring, cybersecurity protection, backup resilience, automation, and operational efficiency for municipal and government environments. Our Key technologies include:
• RMM/Infrastructure Monitoring: SolarWinds, Splunk, New Relic. • ITSM/PSA Platforms: ServiceNow, Jira, BMC Remedy/Helix. • EDR: SentinelOne, Palo Alto Cortex XDR.
• SIEM/SOAR Platforms: Palo Alto Cortex XSIAM, Splunk Enterprise Security. • Backup and Disaster Recovery (BDR): Air-gapped cloud backups, Backup-as-a-Service platforms, encrypted DR repositories.
• Secure Email Gateways: Trellix Email Security, Microsoft Defender for Office 365. • Identity and Access Management: Microsoft Entra ID (Azure AD), MFA, Privileged Access Management.
• MDM/Mobile Security: Microsoft Intune and Mobile Threat Protection solutions. • Patch Management: WSUS, SCCM, automated deployment frameworks. • Cloud Platforms: Microsoft Azure, AWS, hybrid cloud environments. • Virtualization: VMware ESXi, Hyper-V.
• Security Awareness Training: KnowBe4.

This technology stack supports high availability, compliance readiness, proactive threat detection, secure remote access, and operational resilience.

Page | 61
f. What does your incident response look like for a security event? GSG follows a structured incident response lifecycle aligned with NIST Cybersecurity Framework and incident handling best practices. Incident response activities include:
• Detection and alert validation.
• Threat triage and classification.
• Containment and isolation of impacted systems.
• Malware analysis and forensic investigation.
• Root cause identification.
• Remediation and system restoration.
• Post-incident reporting and lessons learned.

GSG utilizes automated playbooks, SIEM/SOAR integrations, and 24/7 monitoring to rapidly respond to cybersecurity events including ransomware, phishing, unauthorized access, and insider threats. During major incidents, executive leadership and cybersecurity specialists coordinate directly with client leadership and emergency management teams to support containment and recovery operations.
g. Have any of your clients experienced a Ransomware attack in the last 12 months? If so, how did your company respond?
GSG has supported organizations responding to ransomware and malware-related cybersecurity incidents. During one engagement involving a Trickbot trojan attack affecting a government client, GSG rapidly isolated infected systems, removed malicious software, conducted enterprise-wide scans, re-imaged impacted workstations, verified patch compliance, and restored systems from validated backups. GSG also performed forensic analysis, implemented enhanced endpoint protections, strengthened access controls, and conducted post-incident remediation activities to reduce future risk exposure. GSG’s rapid-response methodology focuses on minimizing downtime, preserving operational continuity, protecting sensitive information, and accelerating recovery timelines.
h. Describe your organization’s backup validation strategy.

GSG’s backup validation strategy is designed to ensure data integrity, recoverability, and operational continuity across production and DR environments. Backup operations include:
• Full initial backups followed by scheduled incremental backups. • Encrypted and air-gapped backup storage.
• Automated backup health monitoring.
• Backup integrity validation and alerting.
• Quarterly restoration and disaster recovery testing.
• Verification of Recovery Point Objectives (RPOs) and Recovery Time Objectives (RTOs). • Redundant storage across cloud and local repositories.

GSG routinely validates restoration capabilities by performing test recoveries of systems, databases, virtual machines, and file repositories to ensure operational readiness during emergencies.
i. Has your company ever contracted an independent third-party to perform penetration tests against systems you support? If so, when?
GSG routinely partners with independent third-party cybersecurity organizations to perform penetration testing, security assessments, architecture reviews, and vulnerability validation for environments under GSG management and support. These assessments include internal and external penetration testing, web application testing, wireless assessments, credential testing,

Page | 62
and PCI validation exercises.

GSG has partnered with organizations such as Google | Mandiant to conduct active security assessments and validate defensive controls within municipal and enterprise environments.

These engagements support continuous security improvement, regulatory compliance, and independent validation of cybersecurity controls.
j. Describe your company’s familiarity with PCI compliance.

GSG possesses extensive experience supporting PCI DSS compliance initiatives for government and municipal environments processing electronic payment transactions. GSG assists organizations with:
• PCI gap assessments.
• Cardholder Data Environment (CDE) reviews.
• Vulnerability management and penetration testing.
• Security control validation.
• Network segmentation.
• Access control implementation.
• Logging and monitoring requirements.
• Encryption and secure payment processing controls.
• Policy development and compliance documentation.

GSG also performs internal and external vulnerability assessments and penetration testing activities supporting PCI certification and ongoing compliance validation. k. Additional information and options (such as any cloud solutions or other technology solutions offered by your company) are welcome, but these must be included in the maximum number of pages allowed for the proposal (see Proposal Format Guidelines In addition to traditional managed IT support services, GSG provides advanced cloud modernization, Zero Trust Architecture (ZTA), cybersecurity governance, Security Operations Center (SOC) support, compliance advisory services, cloud migration support, and DR modernization solutions. Our Additional offerings include:
• Cloud-hosted disaster recovery environments.
• Zero Trust Network Access (ZTNA).
• Managed SOC and SIEM operations.
• CJIS and regulatory compliance advisory services.
• Vulnerability management and continuous monitoring.
• AI-driven cybersecurity analytics.
• Cloud migration and hybrid infrastructure optimization. • Security awareness training and phishing simulation programs. • Business continuity and resilience planning.

These services help municipalities modernize operations, strengthen cybersecurity posture, improve operational resilience, and optimize technology investments while maintaining compliance with CJIS, PCI, and other regulatory standards.

Page | 63

13. Additional Information
Include sample contract for your services, including any Addendums

SAMPLE MANAGED INFORMATION TECHNOLOGY SERVICES AGREEMENT AND

SERVICE LEVEL AGREEMENT (SLA)

DISCLAIMER
This sample agreement is provided for proposal evaluation purposes only and is not intended to be binding. Final contract terms, conditions, pricing, service levels, and any applicable addendums shall be subject to mutual negotiation and approval between Global Solutions Group, Inc. (“GSG”) and the City of Livingston upon vendor selection and contract award.

1. AGREEMENT OVERVIEW
• This Sample Managed Information Technology Services Agreement (“Agreement” or “SLA”) establishes the general framework for information technology managed services to be provided by Global Solutions Group, Inc. (“GSG” or “Service Provider”) to the City of Livingston (“City” or “Customer”).
• This Agreement defines the service delivery approach, responsibilities, performance expectations, communication procedures, and support framework necessary to maintain and support the City’s information technology environment. • This document is intended solely for proposal evaluation purposes and does not constitute a binding legal agreement.

2. PURPOSE AND OBJECTIVES
• The purpose of this Agreement is to establish a structured and collaborative framework for delivery of managed IT services designed to support secure, reliable, and efficient technology operations.
• Objectives include:
• Establishing clear service ownership and accountability • Providing measurable and responsive IT support
• Supporting stable and secure IT operations
• Maintaining alignment between service expectations and service delivery • Supporting long-term technology planning and operational continuity

3. PARTIES
• Service Provider:

Global Solutions Group, Inc. (“GSG”)
• Customer:

City of Livingston, California (“City”)

4. TERM AND REVIEW
• This Agreement shall remain in effect for the duration of the executed contract unless amended or superseded by mutual written agreement.
• The Agreement and related service levels may be reviewed periodically to ensure continued alignment with operational and technology requirements. • Document Owner: GSG Program Manager

Page | 64
Review Frequency: Semi-Annual or as mutually agreed

5. SCOPE OF SERVICES
GSG shall provide comprehensive managed IT services supporting the City’s technology environment, including but not limited to: Infrastructure and Network Support • Network management and infrastructure administration
• Server and workstation support
• Network performance monitoring
• Switch, router, and wireless infrastructure support
Help Desk and End-User Support
• Remote and onsite technical support
• Help desk services
• Desktop and software troubleshooting
• User account administration
Monitoring and Cybersecurity
• 24/7 system monitoring and alert response
• Antivirus and endpoint protection oversight
• Security updates and patch management
• Vulnerability awareness and incident response coordination Microsoft and Application Support
• Microsoft Windows and Microsoft 365 support
• Application troubleshooting and administration
• License and software management
Backup and Disaster Recovery
• Backup monitoring and administration
• Disaster recovery coordination and restoration support • Backup validation and recovery testing
Virtualization and Communications
• VMware and Hyper-V support
• VoIP and communication systems support
• Mobile and remote device support
IT Management Services
• Asset and warranty tracking
• Vendor coordination
• Documentation and configuration management
• IT project implementation and support

Page | 65

6. CUSTOMER RESPONSIBILITIES
Customer responsibilities include:
• Timely payment for approved services
• Designation of authorized points of contact
• Reasonable access to facilities, systems, and equipment • Participation in maintenance scheduling and service coordination • Prompt communication regarding operational concerns or service requests

7. SERVICE PROVIDER RESPONSIBILITIES
GSG responsibilities include:
• Providing qualified and appropriately trained personnel • Meeting established response and escalation procedures • Maintaining confidentiality and secure handling of information • Providing proactive monitoring and support
• Communicating scheduled maintenance activities
• Maintaining service documentation and reporting

8. SERVICE LEVELS AND RESPONSE TIMES
GSG will make commercially reasonable efforts to respond to service incidents according to the following service priorities:

Priority Description Target Response
Critical Complete outage or major operational impact Within 1 Hour High Significant degradation affecting operations Within 2–4 Hours Medium User productivity issue Same Business Day
Low Routine request or informational inquiry 1–2 Business Days • Actual service levels may be refined during final contract negotiations.

9. SERVICE MANAGEMENT AND REPORTING
GSG shall maintain routine communication and reporting to support informed technology management.

Reporting may include:
• Help desk activity summaries
• System monitoring reports
• Patch and update status
• Security and incident reporting
• Asset and infrastructure status
• Recommendations for operational improvements
• Periodic service review meetings may be conducted to evaluate performance, identify risks, and discuss future technology needs.

Page | 66

10. SECURITY AND CONFIDENTIALITY
GSG recognizes the importance of maintaining secure access to City systems and information.

GSG shall:
• Maintain secure access controls
• Utilize unique user credentials where applicable
• Protect confidential information
• Follow established security procedures and notification protocols • Support compliance requirements applicable to the City environment, including CJISrelated requirements when applicable

11. CHANGE MANAGEMENT
• Changes affecting supported services, infrastructure, or service delivery shall be documented and communicated to appropriate stakeholders. • Maintenance activities and planned service interruptions will be coordinated with the City whenever reasonably possible.

12. TERMINATION
• Final contract termination provisions shall be negotiated upon award. • Either party may terminate the final agreement in accordance with mutually agreed contractual provisions, including transition assistance and transfer of operational documentation where required.

13. NON-BINDING SAMPLE AGREEMENT
• This document is provided solely as a representative example of GSG’s managed IT services agreement and service delivery framework and shall not be construed as a legally binding agreement or commitment.

Page | 67
b. Provide your Company’s Insurance Documentation
The following are samples of our insurance certificate(s). Upon award, we will direct our insurance carriers to issue certificates identifying the City as the Certificate Holder.

General/Professional Liability

Page | 68
Workers’ Compensation (This is handled nationwide through our payroll/benefits company)

Page | i
Appendix I: Key Personnel Resumes
Below are the detailed resumes of our proposed personnel.

VISHAL DAVE – IT PROJECT MANAGER/ACCOUNT MANAGER
Education BS, Computer Applications
Certifications
and Training
CCNA
Training Hardware and Network Engineer, Aptech Solutions Microsoft Certified Professional
Microsoft Certified Azure Fundamentals
Microsoft Azure Administrator
Skills  Operating System: Windows 98, XP, Windows 7, Windows 8, Windows NT

4.0, Windows Server 2003 Windows Server 2008, Windows Server 2016, Windows Server 2019, Linux, UNIX, Ubuntu
 Hardware: Motherboard, RAM, Hard Drive, Network Adapter, Printers, Vonage
 Network: Cisco Switch, Routers, Firewall, Dell Switch, Fortinet Firewall,  Cloud: Office 365, Microsoft Exchange, Azure, Amazon Web Service  Camera: DVR, NVR, IP Camera, Wi-Fi Camera, Analog Camera, Mobile Application
 Software: Windows, SQL, My SQL, Visual Studio, IIS, SSL, Wamp Server, SVN, TFS, Microsoft Exchange, Microsoft SharePoint Administration, Microsoft AD
System Skills  Installing and configuration of Operating system like: Windows XP, Windows 7, Windows 8, Windows 10, Windows Server 2003, 2008, 2012, 2016 and 2019
 Installing and configuration of Application Software
 Knowledge of Networking in Operating system
 Windows server 2003, 2008, 2012, 2016 and 2019 (User Rights Support MCSE and different types of security), Linux, UNIX, Ubuntu  Mastery of Microsoft Office programs (Word, Excel, PowerPoint)  Microsoft SQL Server 2008, 2012 and 2016 Configuration and Backup  Visual SVN Configuration and Backup
 Exchange Configuration, Office 365 Configuration
Key Skills  Valuable knowledge of all the hardware devices and their management  Configure SonicWALL firewall, Cisco Switch, Vonage, Routers, and FortiGate Firewall
 Network processing, centralized and distributive network connection  Installing, configuring, and administering network technologies  Ample knowledge in Windows 98\Me\XP\2000\2008\2010\2003 Server\ 2008 Server\2016 Server\2019 Server
 Active directory management, NTFS security, disk quota management  Diagnostic and trouble-shoot various problems in PCs, networks, servers, routers, and switches
 Networking, LAN, and WAN trouble shooting, Network Auditing, Knowledge of configuration and maintenance, and Routing  Knowledge with CCTV Camera, DVR, NVR, and Camera Protocol  Microsoft AD Configuration
 Knowledge of Amazon Webservices and Azure Cloud computing  Computer assembling and maintenance
 Troubleshooting hardware and software problems

Page | ii
 Installing and configuring the peripherals, components, and drivers  Installing software and application to user standards  Good Knowledge of IIS, SSL, Web Hosting, SQL, My SQL, and PHP Website Configuration
 Self-motivated
 Strong verbal and communication skills
 Problem analysis and solving skills
 Flexible working in all conditions
 Moderate knowledge of AWS and Azure

WORK EXPERIENCE
2007 - Present Senior Network and System Administrator | Global Solutions Group, Inc.
 Responsible for design, configuration, deployment of major networking, communications systems, and critical technologies (LAN/WAN). Install and support LANs, WANs, network segments, internet, and intranet systems.
 Install and maintain network hardware and software. Managing and troubleshooting live production network services in the event of outage.
 Analyze and isolate issues.
 IP Discovery (CDP, Traceroute, and MTR), Sustain inventories of equipment and managing carrier service Network Devices Inventory, and Network’s Documentation.  Configure, troubleshoot, and implement Switches with VLANs, Virtual VLAN interface (SVI), and inter switch communications.
 Monitor networks to ensure security and availability to specific users.  Evaluate and modify the system’s performance.
 Identify user needs.
 Administer computing infrastructure including servers, storage systems, and related equipment and software.
 Install, manage, and maintain Active Directory and MS roles and services.  Determine network and system requirements.
 Maintain integrity of the network, server deployment, and security.  Ensure network connectivity throughout a company's LAN/WAN infrastructure is on par with technical considerations.
2004 - 2007 Senior Network and System Administrator | GlobalTech Solutions  Responsible for the design, configuration, and deployment of major networking, communications systems, and critical technologies (LAN/WAN). Installed and supported LANs, WANs, network segments, Internet, and intranet systems.  Install and maintain network hardware and software. Managing and troubleshooting live production network services in the event of outage.
 Analyze and isolate issues.
 IP Discovery (CDP, Traceroute, and MTR), Sustain inventories of equipment and managing carrier service Network Devices Inventory, and Network’s Documentation.  Configuring, troubleshooting, and implementing Switches with VLANs, Virtual VLAN Interface (SVI), and inter switch communications.
 Monitor networks to ensure security and availability to specific users.  Evaluate and modify the system's performance.
 Identify user needs.
 Administer computing infrastructure including servers, storage systems, and related equipment and software.
 Install, manage, and maintain Active Directory and MS roles and services.  Determine network and system requirements.
 Maintain integrity of the network, server deployment, and security.

Page | iii
 Ensure network connectivity throughout a company's LAN/WAN infrastructure is on par with technical considerations.
 Secures network by developing network access, monitoring, control, evaluating, and maintaining documentation.
 Design and deploy networks.
 Manage AWS Web Services EC2 and S3.
 Create S3 Buckets and manage policies for S3 buckets.  Experience in managing and maintaining IAM Policies for organization in AWS define groups, create users, assign role, and define rules.
 Used Jira track issue and change management.
 Perform network address assignment.
 Assign routing protocols and routing table configuration.  Assign configuration of authentication and authorization of directory services.  Maintain network facilities in individual machines, such as drivers and settings of personal computers, as well as printers.
 Maintain network servers such as file servers, VPN gateways, and intrusion detection systems.
 Administer servers, desktop computers, printers, routers, switches, firewalls, phones, personal digital assistants, smartphones, software deployment, and security updates and patches.
2001 - 2004 Hardware/Network Engineer | Chase Technologies  Provides on-call troubleshooting and issue resolution as required.  Installing hardware and software systems.
 Maintaining or repairing equipment.
 Troubleshooting a variety of computer issues.
 Setting up computer security measures.
 Configuring computer networks.
 Offering technical support on-site or via phone or email.  Repair hardware or software, to a member of an internal IT team within large and mediumsized companies.  Maintains written and oral communications with customers, technical support staff, and management using e-mail, internet, and telephone.
 Performs research on problem resolution.
 Troubleshoots and provides first-line diagnosis for all servers within the Circuit City.  Coordinates and communicates with vendors as applicable.  Provides proactive notifications regarding outages, system changes, and problem recovery.  Applies established priority levels to customer requests for service to ensure business objectives are met.

VINCENT FERNANDES- MANAGED INFORMATION TECHNOLOGY SERVICES PROVIDER Summary IT Professional with over twenty-five years of practical experience managing, supporting and developing IT solutions. Specializes in business transformation, tech refresh and IT infrastructure with deep knowledge of end user support, security, application management, project management and IT service delivery.

Education Masters Institute of Technology – Associate's Degree, Computer Information Systems, Systems Administration
Qualifications
and Experience
Over twenty-five years of IT leadership across manufacturing, enterprise tech, and service delivery verticals. Expertise includes IT infrastructure and cloud managed services, SaaS and on-premise ERP/MRP, contract

Page | iv
negotiation, capital project management, SOW and RFP oversight, vendor selection, MDM solutions (Apple ABM, Verizon, Knox, InTune), Cisco/Meraki/Fortinet networking, Salesforce administration, end user support, CPQ and Lightning development, business intelligence reporting, workflow development, QA testing, user adoption, internal IT application development, and identity management.

Certifications or
Accreditations
• Salesforce Certified Administrator – ADM201 (Current) • Salesforce Advanced Administrator – ADM301 (Current)
Skills • IT support and business transformation management • IT infrastructure and architecture project management • Cloud managed and hosted services, SaaS and on-premise

ERP/MRP
• Contract negotiation and service level agreements
• Infrastructure capital project management, SOW and RFP oversight • Services consolidation and vendor selection
• Master expediter with exceptional multitasking capacity • MDM Solutions: Apple ABM, Verizon, Knox (Samsung), Microsoft InTune
• Cisco, Microsoft and Fortinet VPN
• L1/L2 Cisco Meraki network management
• All aspects of end user support and administration
• Call center, CPQ and Lightning application development • Advanced reporting and analytics (Business Intelligence) • Object and workflow development
• Documentation and training
• QA testing, user acceptance and adoption
• Internal IT application development (onboarding/offboarding, IT lifecycle management of capital assets and human capital) • Identity management

WORK EXPERIENCE
2026 – Present IT Project Management | Freelance Contractor • Worked several ad hoc IT projects as an advisor over the last eight months with a focus on security infrastructure projects.
• Chain of custody camera systems and access control doors linked to Meraki Wi-Fi. • Azure and Office 365 migrations.
• Tech refresh of Windows and iOS endpoint devices using a variety of MDM tools such as ABM, MOBI and InTune.
• Familiar with CJIS and CLETS security compliance policies and system. 2025 – 2025 Desktop Services Engineer Level 2/Level 3 | A3 – Allied Digital • Service Now – Support tickets, knowledgebase and dashboard. • Beyond Trust, RDP.
• Office 365, Windows 10 and Windows 11 migrations.
• SCCM, Azure, InTune, PowerShell.
• MDM, MOBI, ABM and InTune.
• MFA and SSO user support.
• VMU Tablet and industrial device imaging and diagnostics. • RMA support for Panasonic, JLA, Zebra, Ricoh, HP, Agilent. • Printer Logic Administration.

Page | v
• Windows 11 migration support.
• CoPilot deployment support.
• Zscaler and Global Protect VPN.
• MS Defender AV and Malware.
2018 – 2024 IT Manager/Project Manager | Varni Brothers – Modesto, CA • Managed all aspects of information technology and computer systems infrastructure including design, development, implementation, auditing and enforcement of IT systems, policies and procedures.
• Ensured security of data, network access, backup systems, information security and access control.
• Built, configured and supported all access control and security camera systems for ten-acre manufacturing facility.
• Project management of Cap-Ex projects, new technology and new construction using Agile sprint experience.
• Hik Vision camera systems – scaled from 30 to 110 cameras to create chain of custody capability for entire facility.
• Paxton Connect access control systems expert – implemented chain of custody door controllers and project managed additional card key access doors. • Managed daily access control, onboarding and offboarding. • Fiber, coax and Ethernet cabling project management.
• Meraki network implementation and L1/L2 support including VLANs, port management, firewall configurations and deployment of twelve IDFs, MDF and several remote sites. • Managed all client VPN access and device analytics through Meraki dashboards. • Implemented Meraki Wi-Fi network over ten-acre campus using MR33 and MR44 access points.
• Managed site topology maps for network equipment location, Wi-Fi heat maps and EKAHAU site survey scanners to map coverage.
• Strategic alignment with user needs and system functionality to contribute to organizational productivity.
• ERP discovery and selection project manager – SAP Business One and SAP HANA. • Developed requirements for Production, SQF and Shipping departments. • Managed data exercises to map AS400 and SAGE100 to SAP. • Set up and coordinated DevOps team for SAP project with oversight of breakout meetings and Scrum sprints.
• Resource monitoring of multiple projects across the business. • Managed VBC Bottling/Refresco IT transition and performed majority of systems administration.
• IDF project for manufacturing and PLC project for demand tools including remotely viewed can count and large TVs with production output statistics throughout the plant. • Office 365 migration and Microsoft Azure AD with Office 365, OneDrive, SharePoint and Teams administration.
• Windows 11 migration using Intune, SCCM and Azure.
• VMU forklift project.
• Stakeholder management during early discovery and development phases. • Identified problem areas and implemented solutions in a prudent, strategic and timely manner.
• Managed IT vendors and IT OpEx.
• MDM for fleet phones and tablets across iOS, Android, Windows, Knox, Apple MDM with InTune software deployment.

Page | vi
• VMware and Hypervisor vSphere support manufacturing PLC network including ESXi host deployment, storage, backup and recovery.
• Set up and configured training rooms scaled for purpose using kiosk computers and Alchemy systems workplace training.
• Deployed and managed Sentinel, Proofpoint and Webroot AV, email and malware cyber security tools.
• Microsoft SCCM and on-premises Active Directory.
• Implemented training program for HR including scalable training room setup and management.
• Setup corporate LMS to support all onboarding and SQF safety training requirements. 2015 – 2018 IT Manager | Service Champions Heating and Air Conditioning – Pleasanton, CA
• Managed information technology and computer systems infrastructure. • Controlled and evaluated IT and electronic data operations. • Designed, developed, implemented and coordinated systems, policies and procedures. • Ensured security of data, network access and backup systems. • Acted in alignment with user requirements, system functionality and contributed to organizational productivity.
• Identified problem areas and implemented solutions in a strategic and timely manner. • Preserved assets, information security and managed infrastructure. • Built and managed Salesforce CRM to manage capital assets and employee overhead. • Managed migration from SuccessWare to ServiceMax development phase. • Audited systems and assessed outcomes.
• Managed IT vendors and IT budget.
• Project management of Cap-Ex projects, new technology and new construction. 2013 – 2014 Salesforce Administrator | FusionStorm – San Jose, CA • Level 1 and Level 2 Salesforce support for 450+ users. • Level 2 and Level 3 support of all business applications providing break/fix and escalation support, as well as business analysis, requirements and project specification from design through implementation.
• Successful implementations of Box.com with Salesforce integration and Conga Composer

8.x.
• Automated workflow design and implementation.
• Subject matter expert and support for inventory, sales, marketing and financial applications, analytics and reporting processes.
• NetSuite accounting and Avalara tax integration.
• Box.com Enterprise administrator.
• Conga Composer administrator.
• Support tools: Conga Merge, Demand Tools, Excel Connector, Grid Buddy, Word, PowerPoint, PDF generators.
• Mobile device support including iPhones, iPads and Android devices with Salesforce1 mobile configurations.
• Mentoring and support of Level 1 and Level 2 administrators. • Cross-platform project planning and lifecycle support of professional services, finance, sales and logistics teams.

MARK A. SIMMER - SENIOR SYSTEMS/NETWORK ADMINISTRATOR
Education Bachelor of Science: Political Science, Eastern Michigan University, Ypsilanti, MI

Page | vii
Certifications
and Training
Manager Monitoring; AD Manager Plus; ADSelfService Plus (Zoho/ ManageEngine); MS OneDrive, Teams, and SharePoint – Administration and Troubleshooting; Red Hat System Administration I; VMware vSphere: Install, Configure, Manage ESXi 8.0 (Exit Certified); CompTIA Security+; Symantec Endpoint Protection 14 – Plan and Implement/Manage and Configure; Symantec Endpoint Protection 14 – Maintain and Troubleshoot; MS Office 365: 10097 – Administration and Troubleshooting (Learning Tree International); VMware vSphere: Install, Configure, Manage ESXi 5.0; Microsoft SCCM 2012: 10748 – Planning and Deploying System Centre Configuration Manager 2012; Microsoft SCCM 2012: 20696 – Administering System Centre Configuration Manager with Intune (New Horizons Learning Centre); Teamcenter PLM Application Administration; Teamcenter PLM Product Data Management (Siemens); IDEAS 10, 11, 12 – Administration and Data Management.

WORK EXPERIENCE
2020 – 2025 Senior Systems & Network Administrator | Great Lakes Energy Cooperative, Boyne City, MI
 Lead Administrator/Architect for Data Center refresh – Compute/Storage/Networking.  Lead Administrator of VMware virtualized environment.  Lead Administrator overseeing VMware Horizon View/VDI environment including upgrades/conversions from Windows 8.1 -> Windows 10 -> Windows 11.  Lead Administrator of MECM (System Center) environment for ADRs/WSUS updates/Task Sequences/Application(s) Packaging and Deployments/OS and driver(s) deployments/OS Baseline & Compliance settings, etc.
 Lead Administrator of Zoho ManageEngine Products – OpManager for Network Monitoring and IPAM. ADManager Plus for Enterprise AD Management. ADSelfService Plus for enduser self-service password management capabilities.  Lead Administrator of IAM using PingID – SSO/SAML.
 Lead Administrator for SIP implementation to VoIP systems.  Lead SCADA Network and Systems Engineer.
 Lead Administrator for EDR - CrowdStrike Falcon Complete. 2017 – 2020 Senior Back Office Administrator | Inalfa Roof Systems, Inc., Auburn Hills, MI
 Served as North American (NA) Technical Infrastructure Lead.  Served as NA Technical Security Officer – liaise with Chief Security Officer/Compliance Officer.
 Served as Global SEP Admin (Symantec Endpoint Protection).  Created MS SCCM 1702 (currently 1906) Global hierarchy with CAS, three Primary sites and ten Distribution Points for Application/Package Deployment, WSUS Server/Client Updates, Task Sequencing for Win10 OS Deployments and Driver injections (8,000+ nodes Globally).
 VMware upgrade from 5.5 to 6.5 to 7.0 – Dell PowerEdge Hosts.  VMware vRealize Operations (Advanced) 7.0 Suite – vRealize Operations (vRO), vRealize Automation (vRA), and Log Insight.
2014 – 2017 Senior Systems Administrator BAE Industries, Inc., Auburn Hills, MI  Lead Virtualized server environment – reduced Server footprint from seventy-four physical servers to four Virtual Host Servers running forty-six VMs.  Cutover from WatchGuard FireBox to Cisco ASA5505 including Remote User VPN.  Upgraded to 1GB Switched environment with VLANs segregation for Users/CAD/Wireless/ Servers.

Page | viii
 Server Core Switch – Dell N4032 10GB Switch with four 40GB Modules - FEA Server.  Upgraded Windows Exchange server from 2003 to 2010.
 Created, tested and implemented Disaster Recovery Solution including co-location.  Hardened security for wireless, user PCs (and Laptops), email and servers (Wireless MAC Address filtering/Kaspersky EndPoint10 and KSV Virtualized AV/Cisco ESA and MX Logic SPAM filters).

WAYNE R. IDALSKI- IT SYSTEMS ADMINISTRATOR
Education • Bachelor of Applied Science, Applied Business, Davenport University, Gaylord, Michigan | 2005 – 2007
• Associate of Business Administration, Computer Networking Technology, Davenport University, Gaylord, Michigan | 2003 – 2005
• Associate of Applied Science, Electronics, Devry University, Addison, Illinois | 1991 – 1993

WORK EXPERIENCE
2025-2025 Great Lakes Energy Cooperative | IT Systems Administrator  Deployed and managed physical and virtual Windows/Linux servers within VMware vSphere 7 and ESXi 7 hosts.
 Managed multi-site SAN infrastructure to ensure proper utilization of datastores and replication.
 Installed and configured UPS power equipment to ensure proper distribution within data centers and remote offices.
 Installed, configured, maintained and documented hardware and software for computer systems, infrastructure, MPSCS radio system devices, and data centers to ensure availability and efficient use of resources.
 Assisted with strategic planning and performance analysis for technology systems; developed redundancies and disaster recovery plans to ensure critical business system continuity.
2018 – 2025 Great Lakes Energy Cooperative | Systems and Network Administrator  Requisitioned bids from vendors to fulfill and implement budgetary equipment replacement lifecycles that were part of strategic backup and recovery projects which improved performance and RTO/RPO of critical systems.
 Implemented and maintained enterprise backup/recovery system supplemented by LTO8 tape archive libraries.
 Performed upgrades and maintained over eighty Cisco Meraki wireless devices at main and remote offices.
 Deployed and managed Windows OS imaging/OS upgrades, Microsoft 365, third-party software applications and upgrades using Microsoft SCCM to ensure proper patch management and software compliance.
 Upgraded forty printers/MFDs/plotters at ten office locations across Michigan, implementing scan to email/network folder functionality and improving customer productivity using appropriately-optioned devices.
2008 – 2018 Great Lakes Energy Cooperative | Information Technology Specialist  Provided end-user support as initial Tier 1 contact of IT Helpdesk staff and create/work service requests.
 Orchestrated hardware/software upgrades to end user devices and applications  Performed the budgeting and acquisition of hardware and software and maintained proper IT inventory levels.
 Documented technical processes/procedures for other IT staff members to be used as process reference.
 Assisted with the development/coordination/delivery of training for employees associated

Page | ix
with technology systems to increase employee effectiveness, productivity, and maximize investment of the user experience.
 Assisted with deployment/management of 200+ iPhones/iPads via Microsoft Intune. 1997 – 2008 Michigan Office Solutions | Field Service Technician  Installed, configured and maintained computers, network connected printers/scanners, multifunction devices, wide-format digital plotter/scanners and digital document scanners.

ANDREW BOULTON– OFFICE 365 ENGINEER/SYSTEMS ADMINISTRATOR Education Associate of Arts 2002, Grossmont College, San Diego, CA Summary
Versatile and results-driven Senior Network Engineer with over fifteen years of experience designing, implementing, and supporting secure, scalable network and infrastructure solutions across enterprise and remote environments. Proven success in configuring and managing Cisco networks, VPNs, BGP/MPLS routing, and LAN/WAN optimization. Highly skilled in VMware, Windows Server, Active Directory, and cloud integrations. Adept in network hardening, compliance (PCI-DSS, NIST, ITIL), and disaster recovery planning. Strong scripting abilities in PowerShell and Python for automation. Certified CCNA and Network+, with experience supporting both enterprise and DoD environments.

Qualifications
and Experience
• Over fifteen years of progressive experience as a Senior Systems/ Network Engineer across enterprise, government, and DoD environments.
• Specialized in network infrastructure design, LAN/WAN optimization, and Cisco firewall/VPN configuration.
• Advanced skills in Active Directory administration, including group policy, LDAP/RADIUS, and OU structure best practices.
• Proven success in infrastructure migrations, including Office 365 transitions, VMware optimizations, and data center relocations. • Strong background in system hardening, IT audits, and compliance reviews under PCI-DSS and NIST standards.
• Adept in configuring enterprise monitoring solutions (SolarWinds, ManageEngine) for proactive system reliability.
• History of delivering IT projects on time and within budget, ensuring scalability, high availability, and DR readiness.
• Skilled in global collaboration, supporting cross-regional environments and secure cloud integrations (AWS, Azure exposure).
• Record of driving automation initiatives through scripting to reduce manual workloads and improve operational efficiency.

Certifications or
Accreditations
• Cisco Certified Network Associate (CCNA)
• CompTIA Network+
Current Account
Responsibilities
• Design, implement, and maintain secure enterprise network and infrastructure solutions across remote and on-premises environments. • Manage Cisco-based LAN/WAN architecture, including firewalls, VPN tunnels, BGP/MPLS routing, and VLAN administration.
• Administer and maintain multi-site Windows Server and Active Directory environments, including FSMO role transfers, GPO management, and user lifecycle automation.
• Lead and execute Office 365 migrations, Exchange hybrid deployments, and email security controls.

Page | x
• Deploy and manage VMware vSphere/ESXi and Hyper-V virtualization platforms for mission-critical workloads.
• Oversee data backup and DR with Veeam and native Windows tools, ensuring business continuity and compliance.
• Implement security hardening standards (PCI-DSS, NIST, ITIL) across servers, endpoints, and network devices.
• Use scripting (PowerShell, Python) to automate user provisioning, patching, reporting, and infrastructure tasks.
• Monitor system health and network availability using SolarWinds, ManageEngine, and other RMM tools.
• Collaborate with cross-functional teams to support remote access, endpoint security, and overall IT infrastructure performance.

Technical Skills
• Infrastructure and Systems: Windows Server (2012–2022), DNS/DHCP, SCCM, SAN/NAS, Microsoft 365 (Exchange, SharePoint, OneDrive), Endpoint Management
• Virtualization: VMware vSphere/ESXi, Hyper-V, AWS and Azure exposure
• Automation and Scripting: PowerShell, Python, automated user lifecycle, patching, reporting
• Networking: Cisco switches/routers/firewalls, TCP/IP, VPN, VLANs,

BGP, MPLS, LAN/WAN
• Active Directory: FSMO role management, Group Policy (GPO), LDAP/RADIUS, user lifecycle, OU structure
• Monitoring and Security: Veeam, SolarWinds, ManageEngine, PCIDSS, NIST, ITIL, System Hardening, MFA/DUO/Conditional Access • RMM/Documentation: Jira, SharePoint, Visio, ManageEngine RMM Central

PROFESSIONAL QUALIFICATIONS
2018 – 2025 Senior Systems Engineer | Resource Data, Inc. — Anchorage, AK (Remote)
• Led full-cycle infrastructure projects including Office 365 migrations, AD restructuring, and VMware optimization across remote client sites.
• Designed and maintained secure LAN/WAN architecture, including Cisco firewall and VPN configurations supporting remote access and inter-office connectivity. • Administered enterprise Windows Server environments and managed Active Directory infrastructure across multi-site environments.
• Performed FSMO role transfers and seizes as part of AD cleanup, DR testing, and domain consolidation efforts.
• Implemented and maintained VMware and Hyper-V virtualization platforms to support highavailability applications. • Led multiple Microsoft Exchange migrations to Microsoft 365, including hybrid configurations and staged rollouts.
• Configured and managed DNS, DHCP, and GPO settings across secured enterprise networks.
• Supported backup and disaster recovery procedures using Veeam and native tools to ensure data continuity.
• Developed PowerShell and Python scripts for task automation, reducing manual administrative workload.
• Troubleshot and monitored network infrastructure including Cisco firewalls, VPNs, and load

Page | xi
balancers.
2011 – 2018 Senior Network Engineer | Gemalto, Inc. — Atlanta, GA • Led network planning and migration initiatives to support infrastructure upgrades, including IP schema redesign and switch/firewall deployments.
• Administered Active Directory, GPO, DNS, and DHCP across secured enterprise environments, supporting over 500 users.
• Managed multiple concurrent infrastructure projects across departments, ensuring on-time and budget delivery.
• Managed VMware virtual infrastructure and supported system provisioning, patching, and performance tuning.
• Configured Cisco networking gear, VPN tunnels, firewall rules, and inter-site network connectivity.
• Designed and maintained enterprise network environments using Cisco switches, routers, and ASA firewalls.
• Participated in architecture planning and implementation of high-availability VMware environments.
• Conducted internal audits, system hardening, and compliance reviews (PCI-DSS). • Provided technical support during major infrastructure upgrades and coordinated with cross-functional teams.
2009 –2011 IT Consultant | Luna Systems - Atlanta, GA
• Delivered tailored IT infrastructure and virtualization solutions for SMB clients. • Migrated legacy systems to virtual environments, configured VPNs, firewalls, and provided DNS support.
• Supported client infrastructure lifecycle management including DR planning and endpoint support.
• Assisted in security configuration and remote access setup to ensure stable remote workforce operations
DANIEL WILLIAMS – IT SUPPORT ENGINEER
Education Highschool Diploma, Southfield-Lathrup at Southfield, Michigan, Sep 2005 - May 2009
Certifications • CompTIA A+
• Dell Certified Technician
• Apple Certified technician
• JAMF 100 Administrator
• Microsoft Fundamentals
• Kaseya Administrator
• Google IT Support Professional Certificate

WORK EXPERIENCE
2024 - Present Global Solution Group - IT Support Engineer  Installs and configures end-point solutions.
 Monitors end point performance.
 Provides documentation of all implementations.
 Maintains a database of applicable licenses.
 Identifies and updates aby patch releases or version updates.  Resolves technical issues with network components.
2022 - 2024 Aquent at Remote - IT Support Engineer
 Deployed hardware and software to new and existing staff/talent.

Page | xii
 Provided second level support for internal staff and talent resolving laptop (PC, Mac, and Chromebook), mobile devices, network issues, software support, account login, and A/V issues.
 Communicated effectively with both technical and non-technical users via face-to-face, email, chat, and helpdesk ticketing system.
 Provisioned and deprovision hardware, user accounts, software, and cloud-based applications such as Okta, G Suite, and Active Directory.  Assist with account management and purchasing of hardware for the team and help maintain inventory levels.
 Prioritized and managed personal and team tickets and evaluate/execute urgent tasks as needed.
 Investigated malware, PUA alerts, and other security-related incidents, along with patching machines/vulnerabilities.
 Identified ways to streamline common processes and ensure maximized value within IT.  Assist with other technical projects and tasks as needed.  Documentation Support: Creation and adherence to documented procedures.  Ability to work off-hours and support our international offices.  Recommend and implement new technologies and tools to optimize IT support operations, staying up-to-date with market trends and industry best practices to ensure Aquent remains competitive in the tech market.
 Conduct regular knowledge-sharing sessions with the IT team to improve overall technical skills and stay updated on the latest trends and technologies in the IT support field.  Identify opportunities to enhance the IT support experience for staff and talent by implementing user-friendly solutions, such as interactive guides or self-service portals, to increase efficiency and user satisfaction within Aquent's dynamic and fast-paced environment.
 Identify and implement cost-effective strategies to reduce IT support expenses while maintaining quality service standards, demonstrating a strong understanding of budget constraints and resource optimization in the IT support field.  Collaborate with cross-functional teams to ensure seamless integration of new hardware and software deployments, providing valuable insights and recommendations to enhance overall IT support operations at Aquent.
2021-2022 Ford Motor Company at Dearborn - Deskside Support Specialist  Provided direct Face-to-Face end user support emphasizing quality resolutions.  Helped improve end user productivity through triage, advice, and solutions.  Performed hardware break/fix and warranty support for various devices.  Diagnosed and resolved unique system and application issues.  Reimaged systems and alerted management of potential escalations.  Collaborated with IT teams for problem resolution and root cause analysis.  Recommended and performed system upgrades.
 Purchased hardware and software in coordination with procurement.  Installed and tested computers and peripherals.
 Supported mobile devices, printers, and executive users.  Managed equipment moves, configurations, and inventory.  Provided time/resource estimates and tracked activities.  Traveled locally as needed.
 Completed other assigned duties.
2017-2021 SiteOne at Troy, Michigan - Escalation Team Lead  Managed the newly formed Escalation team which acted as a 'Tier 2' for Service deskSupported computers, laptops, tablets, and thin clients.  Installed and supported desk phones and cellular phones.

Page | xiii
 Installed and supported MS Office, Land FX, and other applications.  Installed and supported printers, scanners, fax, and other business equipment.  Maintained hardware and software inventory for entire company.  Managed new users and branches system permissions in supply chain while helping stay Sox Compliant.
 Created, tested, and deployed windows images for the entire company.  Worked with Engineer team to build and maintain proper patches and software upgrades/ installs both remotely and onsite.
 Managed accounts in AD, Exchange, and other applications.  Managed file share permissions in a Windows environment.  Troubleshot in a Citrix environment for both front-facing stores and app developers.  Troubleshot issues in SQL and Microsoft AX environments.  Ordered, shipped, and received IT equipment from the field.  Administered AirWatch MDM solution to over 1,000 mobile devices.  Used tools such as VNC, LogMeIn, and desktop central to troubleshoot remote computers.  Tested QA tickets on a weekly basis.
 Worked and managed Supply Chain inside of Citrix application.  Created and maintained images for computers, laptops, and thin clients.  Monitored network connectivity issues using Dynatrace, Meraki, and PRTG.  Managed vendors and escalated issues.
 Documented all issues in ticketing system.
 Worked with team members to efficiently solve problems.  Handled escalated issues with customers seeking resolutions not handled by original Service desk.
 Provided onsite support for corporate office/branches including light travel and setup/ upgrading.
 Managed and trained new employees, as well as incoming ticket and task queue.  Helped develop new metrics to balance and improve individual employee performance.  Developed and implemented training programs for new employees to ensure smooth onboarding and improve team performance.
 Developed and implemented training programs for the escalation team to enhance their technical skills and improve problem-solving efficiency, ultimately leading to quicker resolutions for escalated issues and higher customer satisfaction.  Provided leadership and guidance to the service desk tech/escalation team by setting clear goals and fostering a positive team environment.
2017-2017 Audatex at Ann Arbor, Michigan - Technical Support Specialist  Delivered top of the line, professional customer service to all customers while performing within departmental call duration targets.
 Used both Mac OS and Windows OS to help end user with multiple different issues.  Documents all customer interactions consistently, thoroughly, and free of grammatical errors.  Contributes to an internal knowledge base.
 Implement innovative solutions to improve technical support processes and enhance customer satisfaction.
 Identify opportunities for continuous improvement in technical support processes and procedures to optimize efficiency and customer experience.  Identify and implement opportunities to optimize the use of remote desktop support tools, such as Bomgar and TeamViewer, to streamline technical support processes and improve efficiency for both internal and external clients, ultimately reducing resolution times and enhancing overall customer satisfaction.
 Collaborate with cross-functional teams to gather feedback on technical support processes and identify areas for improvement, ensuring seamless integration of new strategies and

Page | xiv
techniques into daily operations for superior customer service.  Proactively identify customer pain points and provide tailored technical solutions to enhance customer satisfaction and loyalty, positioning Audatex as a market leader in customer-centric technical support.
2018 – 2019 Apple at Remote - Technical Support Advisor  Provided Outstanding Technical/Customer support to all apple customers and end users via Phone and chat systems.
 Troubleshot and repaired MacBooks, iPhones, iPods and other Apple brand equipment.  Assisted users with iCloud account issues while also educating users on self-service options.  Stayed updated on new Apple products and services to provide customers with accurate and relevant technical support.
 Stayed updated on the latest technical trends and advancements in the tech industry to provide innovative solutions and enhance the technical support provided to Apple customers.  Coordinate with the software and hardware engineering teams at Apple to provide valuable insights into customer feedback and technical issues, leading to enhanced product development and customer satisfaction.

PRITESH PARIKH - NETWORK/SYSTEM ENGINEER
Education
Bachelor of Commerce – University of Mumbai, India
Diploma in Wireless Application Protocol (WAP) - Mumbai, India Advance Diploma in Web Development - Spark Software Academy, Mumbai, India
Advanced Diploma (ACD) in Computer Science - Boston Computer Institute, Mumbai, India
Diploma in System Management - Aptech computer Education - Mumbai, India Certifications • CCNA
Skills
Enterprise Networking:
• Microsoft Server 2019, MS Server 2016, MS Win Server 2008, IP Address Management (IPAM), Failover server, Load balancing, Fault tolerance, Switch Management
• Hardware: Dell Server and switches, Cisco Switches and Routers Additional Skills
• Databases: Oracle, MS-Access
• Languages: SQL, PL/SQL, Visual Basic
• Applications: Wireless Application Protocol (WAP), Visual Studio, MSOffice, Visio

WORK EXPERIENCE
2024- Present Global Solution Group - Network/System Engineer  Maintained the records of the warranty of the servers and switches. Reporting warranty expiring to senior management team.
 Creating new accounts in the Active Directory as per user requirements.  Providing all the necessary access and rights to users as per their roles.  Continuously monitoring and maintaining the Antivirus Server.  Installing Antivirus software to remote systems.
 Monitoring and analyzing all the servers’ system logs.  Successfully transferred servers and Switches to new location with new IP address and reassure the all the security aspect of servers and switches, as well as routings.  Successfully processing the invoices for various steel companies on a daily basis.  Continuously checking and monitoring the data flows and FTP server logging and log files.  Creating various FTP server accounts for clients to access respective company’s account

Page | xv
and data.
 Daily processing JP Morgan (Assurant) invoices for additional customer services and protection with taking due care to remove credit card numbers from invoices and maintain security structure according to various federal government. security norms. 2018 –2024 Innovative Processing LLC. (IPRO)
Network Management.
 Continuously monitoring and maintaining the Data Servers, Active directory, FTP server and printer and Fax Server.
 Installing software to remote systems through active directory and WSUS.  Updating and maintaining various servers.
 Continuously monitoring and maintaining the Juniper Firewall.  Maintained the records of the warranty of the servers and switches.  Reporting warranty expiring to senior management team.  Creating new accounts in the Active Directory as per user requirements.  Providing all the necessary access and rights to users as per their roles.  Continuously monitoring and maintaining the Antivirus Server.  Installing Antivirus software to remote systems.
 Monitoring and analyzing all the servers’ system logs.  Successfully transferred servers and Switches to new location with new IP address and reassure the all the security aspect of servers and switches, as well as routings.

Data Management
 Successfully processing the invoices for various steel companies on a daily basis.  Continuously checking and monitoring the data flows and FTP server logging and log files.  Creating various FTP server accounts for clients to access respective company’s account and data.
 Daily processing JP Morgan (Assurant) invoices for additional customer services and protection with taking due care to remove credit card numbers from invoices and maintaining security structure according to various federal government security norms. 2010 –2014 Dun & Bradstreet Information Services India Pvt. Ltd.

System Operations Manager - Coordinating with operation team for smooth flow of DATA at various stages of project
 Effectively plan, install, configure and optimize the IT infrastructure to consistently achieve high availability and performance for an operation team of twenty-five individuals.  Used layer two port securities functions and secured access of ports. Used OSPF extensively to design routing paths.
 Used Access Control List (ACL) to control the flow of data and design the performance activity based on user’s functions and task.
 Designed a plan to monitor network performance across the region through central control.  Identifying and implementing creative solutions to meet challenges.  Successfully transfer system to Cloud computing model of network utilizing the concept of virtualization.
 Led the development of new ticketing network system.
 Managed Management of Information System (MIS).

Additional Responsibility
 Developed communication plan for MIS team.
 Designed back up and load balancing plan, Provided archive solution.  Designed Automated Report delivery System for customers and top executives.  Part of the Workflow development system initiated active participation of business partner for direct inputs of data and status of mandates in hand.  Helped in implementing governance policies and regulations. 2005- 2010 TATA-AIA Life Insurance Co. Ltd.

Page | xvi
System Manager
Insurance Package System (IPS)
 Managed and supported IPS.
 Actively participated in Information systems planning, installation and maintenance.  Responsible for Firewall access rules, changes and updates for on-premises membershipbased website.  Managed system and file backups for daily file restoration and potential DR.  Managed Performance Analysis and Report delivery System for customers.  Used Port Address Translation (PAT) for access to web servers and main data servers for team members.
 Established IT procurement, vendor relationships, and set equipment standards.  Being part of a team was involved in analyzing, continuous process checking documentation, as well as for the team.
 Successfully managed team and teamwork with time bound quality.

PRATIK AGRAWAL – SYSTEM ENGINEER
Education MS, Networking and Communication
BS, Engineering in Computer Science
Summary
Five years’ experience providing IT Engineer support to various customers.

Designed, implemented, and managed network security countermeasures including firewalls and Intrusion Detection/Prevention Systems (IDS/IPS).

Worked with SCCM to manage huge groups of Windows-based devices and computers. Expert in designing email platforms for Office 365, Exchange, Gmail, Outlook, and Yahoo. Proficient in Microsoft Office Suites such as Word, Excel, PowerPoint, and Excel.

WORK EXPERIENCE
2018 – Present Global Solutions Group – IT Support Engineer  Worked on the IOT devices peripherals and researched and developed the devices with the different types of components.
 Worked on configuring different types of connections across workstations with distinct user creations and identical data and applications users.
 Brainstorming with coworkers to improve building hardware or hunt for new software.  Worked to locate and fixes hardware, software, and operating system issues, performs small fixes, or refers to application specialists.
 Knowledge of a variety of Cloud storage platforms, particularly AWS, Azure, Google Drive, Dropbox, and Microsoft OneDrive.
 Deployed new machines to designated end users; deployed new software, such as Office; deployed new VPN software. Provided Network Security support, security engineering and implementation on LAN/WAN for multiple enterprise customers, including second tier technical support.
 Designed, implemented, and managed network security countermeasures including firewalls and IDS/IPS.
 Worked with SCCM to manage huge groups of Windows-based devices and computers.  Expert at designing email platforms for Office 365, Exchange, Gmail, Outlook, and Yahoo.  Knowledgeable of Google Suites, including Google Docs, Google Sheets, and Google Slides.
 Proficient in Microsoft Office Suites such as Word, Excel, PowerPoint, and Excel.  Technical assistance for Router, Switch, Net-gear equipment, including VPN, print servers, VoIP, and firewalls. Understands the intermediate level of the writing code.  Managed and organized resources including users, computers, groups, printers, and other networked devices using Active Directory.

Page | xvii
 Able to do simple system repairs and skilled at spotting problems that should be escalated to an application specialist for repair.
 Provided assistance with the installation and distribution of Personal Computers (PCs) throughout the facilities.
 Executes network installation and maintenance configuration and troubleshooting tasks.  Expertise with cybersecurity products, such as setting up and maintaining Any Virus Scanners including Bitdefender, Avira, McAfee, and Trend Micro.

VATSAL SHAH - CYBERSECURITY ASSESSOR/PENETRATION TESTER Education MS, Computer Science, University of Bridgeport Certifications PCIP PCI Professional
CCSK Certificate of Cloud Security Knowledge V.4
CISA Certified Information Systems Auditor
CISSP Certified Information Systems Security Professional CISSPISSAPCISSP - Information Systems Security Architecture Professional
CEH Certified Ethical Hacker
GWAPT GIAC Web Application Penetration Tester
HVATL/OP High Value Asset Technical Lead (TL)/Operator (OP) Training

WORK EXPERIENCE
2024 – Ongoing City of Sunnyvale | Global Solutions Group, Inc. Cybersecurity Technical Lead/Penetration Tester
 Conducts Penetration Testing and provides corresponding recommendations.  Reviews and assesses the level of physical and logical security of the City’s data center.

Recommend changes to IT systems and business processes.  Recommends IT security solutions for all components to include: NGFW (Next Generation Firewall), ATD (Automated Threat Detection), SWG/SEG (Secure Web and Email Gateways), DDoS Protection, EPP (Endpoint Protection Platform), EDR (Endpoint Detection and Response), SIEM (Security Information and Event Management), VPN (Virtual Private Network), and MTP (Mobile Threat Protection).
 Provides a comprehensive report with details about all aspects of the assessment performed and provides recommendations in line with current best practices in the industry. 2024 - 2024 City of Roseville | Global Solutions Group, Inc. Cybersecurity Technical Lead/Penetration Tester
 Developed a security assessment plan for water/wastewater control systems which includes, but is not limited to, industrial radio networks, control system networks, and server infrastructure.
 Reviewed and analyzed network architecture, security controls, and configurations.  Confirmed current security and data protection controls are in place and are compliant with industry standards.
 Assessed the effectiveness of our access controls, authentication mechanisms, and user management processes.
 Developed written security policy and procedures using the NIST framework.  Developed an emergency response and recovery plan to be used in the event of a cybersecurity event.
 Conducted a comprehensive security assessment, including vulnerability scanning and penetration testing.
 Developed and implemented Tabletop Exercises to test the City’s IT and Security personnel readiness for addressing cybersecurity attacks and incident response requirements.

Page | xviii
2023 –2024 Oakland County, Michigan | Global Solutions Group, Inc. Cybersecurity Technical Lead/Assessor
 Developed and provided Tabletop Exercises including:
 Defining objectives and goals of the exercise.
 Planning the exercise, in-person or virtual, duration, format, and logistics.  Providing pre-exercise materials, scenario description, incident response plans, policies, and any other relevant documentation.
 Conducting the Exercise: Start by presenting the scenario to the participants and allowing them to discuss and respond to the unfolding situation. Encourage active participation, engagement, and collaboration among participants.
 Facilitate Discussion: As the exercise progresses, facilitated discussions among participants to address the incident. Encourage them to share their responses, make decisions, and discuss potential actions.
 Document Observations: Captured key points discussed, challenges faced, and recommendations made by participants.
 Debrief and Evaluate: Conducted a post-exercise debriefing session to discuss the exercise outcomes. Allowed participants to provide feedback on what worked well and what needs improvement. Analyzed the observations and identify lessons learned and actionable recommendations.
 Develop an Improvement Plan: Based on the feedback and observations from the exercise, create an improvement plan to address the identified gaps or weaknesses. 2021 – 2022 San Diego County Regional Airport Authority | Cybersecurity Technical Lead/Penetration Tester
 Conducted systems and network penetration testing and CIS Critical Security Controls (CSC) v8 assessments for the Aviation Security Specialized Systems. This included penetration testing and CSC v8 controls assessment of the in-scope systems: Hirsch Velocity Software Security Management System, Hirsch Door Controllers, Velocity Vision CCTV System, Axis Cameras, Approximate number of devices, Twenty servers, Ten cameras, One door controller, and One workstation.
2020 – 2020 Jacksonville Aviation Authority | Global Solutions Group, Inc.

Penetration Tester
 Provided Network Penetration Testing.
 Project consisted of external network penetration testing, internal network testing and mapping of JAA’s network with the goal of obtaining access to protected data in four categories: Access Control, Law Enforcement and Criminal Justice Information System Compliance, PCI Compliance, and General Security.
 Testing was conducted at the four airports under JAA’s control. 2020 – 2020 Kansas Dept. of Health & Environment (Topeka, KS) | Global Solutions Group, Inc. Technical Lead
 Conducted external scans using a suite of tools that assess the EpiTrax Application Security Assessment from the perspective of an outsider, along with manual verification of vulnerabilities and exploitation of identified application/host vulnerabilities to gain system level access, obtain custom data, or deny service to the application. 2020 – 2023 Lansing Board of Water and Light | Global Solutions Group, Inc.

Cybersecurity Technical Lead/Penetration Tester
 Performed penetration testing on all new enterprise applications being deployed into the environment and existing applications that have gone through a significant upgrade. 2020 – 2020 Fort Wayne-Allen County Airport Authority | Global Solutions Group, Inc. Penetration Tester, Security Assessor

← All documents from this meeting