Livingston City Council
July 7, 2026

Page | xix
 Led a full IT Security Assessment including multiple assessments of the internal and external networks, social engineering testing, review of network device configurations, application and wireless penetration testing, and social engineering efforts. 2019 –2020,
2018 – 2018
Nevada Affordable Housing Assistance Corporation | Global Solutions Group, Inc. Penetration Tester
 Provided Network Penetration and Vulnerability Testing.  Exposed vulnerabilities and safely exploited them to gain access to the NAHAC’s system, without any detection, without any interference, and without any outage. Activities included:
define scope and communications; intelligence, threat modelling utilizing automated tools.  Performed vulnerability analysis to review security risks associated with the network(s) and means of exploitation; exploitation of discovered vulnerabilities. 2017 –2021 USDA Office of the Chief Information Officer | Global Solutions Group, Inc. Technical Lead/Penetration Tester
 Provided Operational Security Assessments, Penetration Testing, and Web Security Assessments.
 Served as the cybersecurity subject matter expert and internal penetration tester to perform Web Security Assessments on designated HVA Web Applications for USDA agencies.  Performed security assessments and penetration testing and performed security assessments of web servers and applications.
2017 –2024 Department of Treasury | Global Solutions Group, Inc. Technical Lead/ Penetration Tester
 Provided Systems Security Services Support to enhance the mission assurance posture of the OIG network by conducting a comprehensive cybersecurity assessment, document findings in a Plan of Action and Milestones (POA&M).
 Supported the OIG with implementation of Government approved mitigations in accordance with NIST and Committee on National Security Systems Instruction (CNSSI) to include the NIST Risk Management Framework (RMF).
2017 - 2017
Energy Meters, Energy Bridge and Supporting Environments – Confidential Critical Infrastructure Client | Global Solutions Group, Inc.

Penetration Tester
 Conducted Security Architecture Review of Energy Bridge and other “smart” devices.  Provided analysis of utility meters communications, configuration, topology review and the vulnerability test of various communication channels, ZigBee, ZWave, Wi-Fi, and Bluetooth used by energy bridge and other home automation devices. 2017 –2017 U.S. Air Force | Global Solutions Group, Inc. Penetration Tester  Provide black-hat style hacking attacks into the Air Force’s non-classified servers.  Conducted vulnerability assessments, identified weak points, which were breached. 2015 –2017 Vulnerability Assessment of a Confidential Chemical/Energy Client | Penetration Tester
 Conducted configuration review and vulnerability assessment of their Process Control Network (PCN) which consists of the perimeter firewalls, Historian systems and Programmable Logic Controllers (PLCs), and wireless scanning and testing.

KUMAR SETTY - CYBERSECURITY ASSESSOR
Education MS, Software Engineering, Carnegie Mellon University MBA, University of Illinois, Chicago
BS, Chemical Engineering, University of Rochester
Certifications HCISSP Healthcare Information Security and Privacy Practitioner CISSP Certified Information Systems Security Professional

Page | xx
CISA Certified Information Systems Auditor
AWS Amazon Web Services Certified Cloud Practitioner
CCSK Certificate of Cloud Security Knowledge
ITIL V3 Foundations Certification
MISC. Software Security Foundations, Stanford University Summary Over fifteen years of experience in providing penetration testing in multiple sectors including university, healthcare, finance, and technology sectors.

Areas of expertise include:
· IT Compliance and Risk
Management
· Cybersecurity Architecture
· Regulatory/Standards
Compliance
· IT Security Policy Development
· Healthcare and Fintech Security
Systems
· Vulnerability/Threat
Assessments
· Governance Frameworks
· Team Leadership and Mentoring
· Cybersecurity Training/Desk Top
Exercises
· Project and Program
Management
Highly adept in developing and implementing security, privacy, and breach management programs with expertise in vulnerability assessment and penetration testing. In-depth knowledge of security assessments of databases, EHR/EMR, SAP, Oracle Financials, and other ERPs. Eight years of experience in performing security and privacy risk assessments and audits. Well-versed in HITRUST SOC 1/2/3, FFIEC, NIST, COBIT, HIPAA, PCI-DSS, SEI-CMM methodology, IT QA methods, and ISO security standards with vast understanding of threat modeling using frameworks such as Octave Allegro and MITRE ATT&CK.

WORK EXPERIENCE
2022 - Ongoing Global Solutions Group | Cybersecurity Assessor  Provides vCISO support to multiple clients. Supports Cybersecurity Assessments and Remediation Activities. Conducts Cyber Maturity Assessments.  Develops Audit Charter and Framework Documentation.
2020 –2021 Halo Investing | Chief Information Security Officer  Spearheaded organizational security infrastructure from inception to launch for highly regulated fintech start-up.
 Established an IT security governance program, assessment program, IT security policy framework, and comprehensive policies and procedures, including incident management procedures.
 Managed and executed disaster recovery and business continuity testing.  Designed and developed secure file transfer portal for information exchange.  Leveraged MITRE ATT&CK framework and OCTAVE Allegro methodology to build threat model.
 Devised and led cybersecurity training program using KnowBe4 to educate staff on phishing and spear phishing, vishing, awareness, and USB handling.  Optimized data security by deploying Sophos endpoint protection and mobile device management, JumpCloud IAM solution, GSuite, and AWS hardening.  Designed compliance management system, developed IT risk assessment framework and assessment program based on NIST, FFIEC, and HITRUST, and implemented architecture for FINRA 17a-4 (WORM) compliance.
 Implemented and executed recurring IT controls assessment plan based on NIST 800-53.  Implement fraud risk assessment methodology and program. 2016 –2020 Client Confidential | Chief Information Security Officer (CISO)

Page | xxi
 Provided direct client services for healthcare providers, fintech, global safety organizations, and medium-to-large retailers. Managed team of five consultants, successfully supervising and executing cybersecurity projects for numerous clients.  Cloud Security (AWS and Azure) - Developed and implemented risk management framework, AWS Cloud security assessment plan, and policies/procedures in line with HITRUST and HIPAA, CIS, NIST CSF, NIST 800-53, and PCI. Established best practices, dashboards, and analytics to measure security posture and service desk capabilities (ITIL). Institute security baseline for future Cloud projects. Compiled reports on current Cloud security and privacy trends.
 Healthcare Privacy and Security - Oversaw project plan development and implementation focusing on risk analyses and assessments in alignment with Resolution Agreement and Corrective Action Plan mandated by Office of Civil Rights, and with grant funding from Department of Homeland Security and Medical Device Innovation, Safety and Security Consortium (MDISS).
 EHR systems - Merging billing systems and insurance interfaces and setting up QuickBooks accounting software.
 PCI-DSS Compliance - Spearheaded comprehensive PCI-DSS readiness and gap assessment, managing in-depth PCI scope reduction in collaboration with third-party consultants.
 Vulnerability Assessment and Penetration Testing - Conducted vulnerability assessments and penetration tests of hosted applications and utilized Tenable, Nikto, Nmap, Burp Suite, and ZAP to design IT infrastructure.
 Service Desktop Optimization - Formulated and introduced Jira workflows for user provisioning and developed scripts and weblinks to vendor portal. Performed ITIL gap/maturity analysis, implementing guides and SOPs, reducing repetitive tickets by 85% and helpdesk time by 75%.
 Robotic Process Automation (UiPath) - Innovated solutions to automate monthly security reviews and simple SAP audit tests, saving client 75% on audit fees. 2013 –2016 Presence Health | Security and Privacy Consulting Manager  Assessed and improved data security and privacy for healthcare clients, performing risk/security assessments, cybersecurity research, and threat modeling in collaboration with internal staff.
 Established comprehensive policy framework and ensured regulatory compliance by employing HIPAA OCR Audit Program for Security, Privacy, and Breach Notification.  Accomplished periodic vulnerability assessments, penetration tests, and on-site security reviews in addition to compiling and presenting reports on phishing, spear phishing, and social engineering exercises.
2012 –2013 Grant Thornton LLP | Business Advisory Services Manager  Oversaw team of 2-5 employees in execution of audits and assessments for mid-market companies, healthcare providers, and NPOs, managing SOC 1, 2, and 3 attestation engagements in Midwest region and ensuring safety controls for information stored and processed in the Cloud.
 Successfully directed staff and finances for multiple assurance/audit projects, completing on time and within budget.
2011 –2012 PricewaterhouseCoopers | Assurance Manager
 Conducted audits and assessments for Fortune 500 companies and large healthcare providers while managing a team of 10-25 employees.
 Directed projects involving network security, HIPAA compliance, J-SOX, IT SOX, ERP security, data conversion, and support of financial statement audits, overseeing offshore resources for successful global audit execution.
 Accomplished successful and timely execution of numerous projects with budgets ranging

Page | xxii
from $100k to $750k.

RUBIN MEHTA- CYBERSECURITY ENGINEER
Education MS, Engineering in Computer Networks, Ryerson University BS, Electronics, North Maharashtra University
Certifications CEH Certified Ethical Hacker
CCNA Cisco Certified Network Associate
CCSP Cisco Certified Security Professional
CISS Cisco Information Security Specialist
McAfee Host Intrusion Prevention and ePolicy
Orchestrator Certified
Arc Sight Integrator/Administrator
Security Analyst – ESM/SIM
Systems Engineer/
Architect Splunk Certified Systems Engineer/Architect
Systems Engineer RSA envision CSE (Certified Systems Engineer) Summary Over ten years of experience in network security, data networking, and information technology. Proven, results-oriented, and a senior level information security professional. Possesses a wealth of knowledge in security architecture, engineering, operations, and managed security services. Successfully achieved a Master of Engineering in Computer Networks from Ryerson University, Toronto, Canada, and earned the Certified Ethical Hacker designation from EC-Council. Expert in AWS, Azure, Cisco, and various vendor routers and switches, and is currently a CCIE candidate. Possesses a solid understanding and experience in configuring and troubleshooting LAN/WAN, network security, forensic data analysis, VoIP, and network management technologies. Initiative-taking, fast-learning team player with successful leadership skills, comfortable working under pressure. Demonstrates superior relationship-building and interpersonal skills to work effectively in team situations and proven ability to manage new clients and provide leadership during the integration and transition phases of large outsourcing projects.

WORK EXPERIENCE
2022 –2027 Department of the Interior - Interior Business Center | Global Solutions Group, Inc. Call Order Project Manager
 Provided Information System Security Line of Business (ISSLOB) Support includes comprehensive services that involve performing full-scale system assessment and authorization audits or system assessment only audits; and targeted services that involve performing discrete specific security-related audit functions based on the customer agency’s need.
2021 –2022 Johnson County Community College (JCCC) | Global Solutions Group, Inc. Technical Lead/Principal Consultant
 Provided recommendations for improving JCCC’s Information Security Incident Management processes that promoted all relevant activities integrated.  Followed best practices processes and made recommendations to implement in areas of improvement to obtain best practices, define objectives, measurements, and prioritizations to occur.
2021 – Ongoing Suburban Mobility Authority for Regional Transportation | Global Solutions Group, Inc. Technical Lead

Page | xxiii
 Developed a DR plan that includes Co/Lo site, second data center, Cloud base DR site, and other DR technology.
2020 – Ongoing State of Kansas, Board of Tax Appeals | Global Solutions Group, Inc.

Cybersecurity SME
 Conducted external scans using a suite of tools that assess the application from the perspective of an outsider along with manual verification of vulnerabilities and exploitation of identified application or host vulnerabilities to gain system level access, obtain custom data, or deny service to the application.
2019 - Ongoing Security Byte Inc. | Principal SIEM consultant/Architect  Provided guidance on security architecture, practices, and solutions to help business units to build and deliver SIEM solutions.
 Developed and maintained security architecture artifacts that can be used to integrate security requirements in projects and operations.
 Reviewed, evaluated the design and operational effectiveness of security controls and countermeasures used to protect applications, services, and solutions. 2019 – 2019 Bank of Montreal | SIEM consultant (Contract)  Created onboard data/logs of custom application and database logs.  Built custom parser using regular expressions to normalize events logging to Splunk.  Updated spunk configuration files to meet BMO security monitoring use case requirements.

Offer consultative advice on security principles and best practices. 2018 – 2021 USDA Office of the Chief Information Officer | Cybersecurity SME  Served as cybersecurity SME, performed security assessments, and penetration testing in accordance with the Agriculture Security Operations Center (ASOC) Security Assessment Methodology, the USDA Rules of Engagement for the Operational Security Assessment Penetration Testing.
 Performed security assessments of web servers and applications in accordance with USDA and other federal regulations, as well as industry best practices and guidelines including NIST, DISA STIGs, and the Open Web Application Security Project (OWASP) Top 10. 2018 - 2019 Herjavec Group Inc. | QRadar SIEM Consultant  Performed use case development, SIEM architecture, design, and capacity planning as part of SIEM client on-boarding services (Splunk and IBM QRadar).  Provided technical guidance, mentorship to Managed Security Services team (SOC).  Provided support during pre-sales opportunities and participating in Proof of Concept and Pilot engagements.
 Produced quality proposals that require minimal checking.

KALPESH UNADKAT - CYBERSECURITY ARCHITECT
Education Master of Science, Network Security, Capitol College Certifications CISSP Certified Information Systems Security Professional CCNP Cisco Certified Network Professional
ITIL Foundation Certification
Certified HIPAA Professional
University of Michigan Health System LEAN Training
Summary More than twenty-five years of experience involving information system security for health care organizations. Highly experienced with Splunk, Oracle, SQL Server, LAMP, tomcat, jBoss, jQuery, Windows XX, 2012/2009, UNIX (AIX, HP/UX, Linux), Cisco WISM/5500/4400 series wireless controllers and 1242, 1230,1512, 1300 and 3500 series wireless access points, Checkpoint Firewall-1 and VPN-1 products, BMC Remedy, Perl, C Shell, and CVS.

WORK EXPERIENCE
2018 – Ongoing Global Solutions Group, Inc. | Cybersecurity Subject Matter Expert

Page | xxiv
(SME)
 Resident Subject Matter Expert for health care industry cybersecurity requirements, including HIPPA compliance, cybersecurity architecture for eHealth applications, and related system development and support.
2011 - Ongoing University of Michigan and University of Michigan Health System | IT Monitoring Lead
 Technical lead for Enterprise inventory project: Working with multiple service providers across health system (i.e., IT departments, clinical engineering, facilities, and security) to identify, collect, catalog, and validate devices connected to the Health system network.  Leads the SIEM project: Working with UM IIA, ITS, the Dearborn and Flint campus to identify, evaluate and recommend a SIEM solution that will work across the University of Michigan Campus.
 Manages the IT monitoring team, defining strategy and goal for the team, implementing solutions to improve availability of IT systems at the hospital.  Led the implementation of Splunk.
 Collaborating with people at all organizational levels including Office of Clinical Affairs, CIO of MSIS, ITS, and MCIT departments and various other management. 1995 – 2011 University of Michigan Health System | Network Architect (Lead) Network Security
 Provided high level expertise for all aspects of systems security, including design and installation of firewalls, vulnerability assessment and remediation, incident response, forensics and policy development, and enforcement.
 Implemented two factor authentication solution using Duo Security Solutions.  Led VPN migration project from Checkpoint VPN to Cisco SSL VPN.  Led Implementation of Cisco Intrusion detection solution.

Network Infrastructure
 Routine duties included monitoring, tuning, and optimizing cisco routers, router protocols, and switches to guarantee uninterrupted production abilities.  Designed and implemented UMHS wireless network and developed security policy for the same.
 Designed and implemented Cisco ACE load balancing solution. Led Cisco CS11000 implementation for our main patient care web application, as well as SMTP/IMAP/POP servers. Developed technical training for MCIT colleagues on network security and wireless networks.
 Implemented Level 1 authentication using Merit radius server for modem pool and VPN user authentication.
 Upgraded UMHS network from shared Ethernet and FDDI backbone to Cisco switched network and gigabit backbone. Led the Dial-In project using Cisco AS5300.  Managed all aspects of the Year 2000 compliance project.

Network Management
 Implemented Wireless LAN management solution to manage 3,000 wireless access points.

Implemented CiscoWorks 2000, and Concord e-health.
 Led Remedy (Helpdesk trouble ticket system) application team from 1998-2001.  During that period, moved on-call and server tracking to Remedy.  Created process for Security incident handling in Remedy.  Implemented alphanumeric paging solution.

Page | xxv
Appendix II- Performance Evaluations
Unsolicited Customer Reviews
Our expectations were met and exceeded. It had been a
while since our Environmental Utilities (Water and
Wastewater) team had reviewed our Cybersecurity
Program (policies and procedures) or performed
Vulnerability Assessments with penetration testing of the firewalls between IT and OT. Refreshing our BIA,
Incident Response and Recovery Documents, and
developing an Incident Data Collection Form was long
overdue and much needed. Based on the findings from
the assessment and GSG recommendations of creating
other NIST framework documents for our program, you
have helped us generate our OT Cyber and Physical
Security Roadmap for the future.

Our goal is to perform annual Vulnerability Assessments rotating between a few firms so we can get different
perspectives and professional outlooks. GSG will be one of the top firms considered for the rotation moving
forward as we would enjoy doing business with them
again in the near future.

City of Roseville
Environmental Utilities
– Water and
Wastewater Divisions
I wanted to take a moment to personally thank the GSG
team for their incredible work during our transition to GSG. Your Team has been absolutely amazing with their
hard work, and I also want to acknowledge the efforts of the rest of the behind-the-scenes GSG team. The
professionalism and expertise they’ve demonstrated is
exactly what we were hoping for from GSG. Their
exceptional support, responsiveness, problem-solving
abilities, and proactive communication have been a
breath of fresh air, and it’s so appreciated. Our team at the city, without me prompting them, have expressed
how thankful they are that we chose GSG. The fire chief in particular had nothing but great things to say about the site visits and the efforts to resolve their issues.

I’m really looking forward to our continuing partnership as we move forward, and I wanted to make sure you both
were aware of how the interaction has been going from
the boots on the ground. Thank you!
City of Rochester, IT
Support Services
I wanted to take a moment to express my sincere
appreciation to each of you for your tireless efforts in restoring our network earlier this week. We were
impressed with how the situation was managed and the
way you maintained clear and consistent communication
throughout the entire process. Thank you!
OPC Social and
Activity Center,
Rochester-MI
Thank you so much Lisa [Lisa Salvador, GSG Vice
President]. You and your staff did an outstanding job with our FISMA Auditing Services, and I look forward to
working with your staff in the future.

U.S. AbilityOne
Commission

Page | xxvi
Global Solutions Group, Inc. (GSG) rescued our state
agency when our system was attacked by a Trickbot
trojan. Once our agency contacted GSG; they were on
on-sight quickly and started the process of removing the trojan. While working on the source hit by the trojan,
Global diligently ran scans on all servers and PCs to
assure the trojan had not attacked any other part of our system. GSG’s expertise, professionalism, and diligence kept our entire system in tack.

Since then, our agency has had four additional contracts with GSG, including one that updated our entire server
system. With GSG’s expertise, the agency was able to
go down to three servers versus the eleven servers that were currently being used.

GSG will always be our “go-to;” as they provided
excellent service at a very reasonable cost.

Director
State of Kansas
Board of Tax Appeals
Contractor Performance Assessment Reporting System Performance References Customer Work
Performed
Appreciation
Summary Schedule Cost Quality of Service Management Regulatory Compliance USDA – OIS
Security
Assessments
and Pen Testing
(2018–2024) –
$10M
Exceptional –
over twenty-five
tests delivered
with zero rework;
supported FISMA
compliance
across USDA.

Exceptional Exceptional Exceptional Very Good Exceptional Department
of the
Interior
Cybersecurity
BPA (2020–
Present) –
$26M+
Managed fiftyseven task orders
across twenty-one
agencies with
98% on-time
delivery.

Very Good Exceptional Exceptional Exceptional Exceptional DOT –
FHWA
Cyber Risk
Assessment
(2021) – $450K
Delivered
mitigation
roadmap and
executive
summary for DOT
OCIO.

Very Good Very Good Very Good Very Good Exceptional
Dept. of
Treasury/
AmeriCorps
FedRAMP and
NIST
Documentation
(2022) – $500K+
Enabled ATO
submission and
aligned
documentation to
NIST SP 800-53.

Very Good Very Good Very Good Very Good Exceptional
AFMC – U.S.

Air Force
Purple Team
Engagement
(2022–2023) –
$108K
Improved SOC
detection by 37%
through live
adversary
simulations.

Exceptional Exceptional Exceptional Exceptional Exceptional DHS – CISA
Priority
Infrastructure
Cyber Support
(2020–2021) –
$500K+
Exceptional –
Delivered
uninterrupted
support to
national security
systems.

Exceptional Exceptional Exceptional Exceptional Exceptional

Page | xxvii
Performance Summary by What Mattered Most to Our Customers At GSG, our performance is defined not only by meeting
expectations but by delivering meaningful outcomes when it mattered most. When clients reflect on our work, they focus on the results we enabled — who responded, how effectively we executed, and the tangible improvements that followed.

This section presents verified client feedback, organized by benefit categories that agencies consistently value: cost efficiency, schedule reliability, program management, quality of service, regulatory alignment, innovation, and mission-critical recovery. Each reference highlights a specific result where GSG helped safeguard operations, prevent failure, or drive improvement.

These tables go beyond listing qualifications. They reflect what our clients found most valuable — and we believe those same priorities will matter just as much to those we serve next.

Performance Evaluation Table – Grouped by Benefit Category Saved the Day
Customer Work Performed Customer Appreciation Summary
USDA – OIS
Security Assessments and
Pen Testing (2018–2024) –
$10M
"Impressive technical precision." Recovered
POA&M and delivered zero-defect test slate
under deadline.

AFMC – U.S.

Air Force
Purple Team Engagement
(2022–2023) – $108K
"Helped us understand where we stood." Improved SOC
readiness score by 37% in mission-critical exercise.

DHS – CISA
Priority Infrastructure Cyber
Support (2020–2021) –
$500K+
"The support never dropped—even under stress."
Delivered national ops under 24/7 coverage.

U.S.

AbilityOne
Commission
Multi-Year FISMA Audit
Support (2020–2024) – $2M+
"Your staff did an outstanding job with our FISMA audits." Turned around failing audit performance.

Cost Control
Customer Work Performed Customer Appreciation Summary
USDA – OIS
Security Assessments and
Pen Testing (2018–2024) –
$10M
Delivered over twenty-five assessments with no
rework, supporting FISMA, ATO, and POA&M
success. "Impressive technical precision."
AFMC – U.S.

Air Force
Purple Team Engagement
(2022–2023) – $108K
Delivered within fixed price and managed scope cleanly. "Good value and professionally executed."
Department of
the Interior
Cybersecurity BPA (2020–
Present) – $26M+
Managed fifty-seven task orders across twenty-one
agencies within budget. "Very efficient execution across multiple bureaus."
U.S.

AbilityOne
Commission
Multi-Year FISMA Audit
Support (2020–2024) – $2M+
Consistent, audit-ready delivery across the years. "Your staff did an outstanding job with our FISMA audits."
Management
Customer Work Performed Customer Appreciation Summary
USDA – OIS
Security Assessments and
Pen Testing (2018–2024) –
$10M
Delivered over twenty-five assessments with no
rework, supporting FISMA, ATO, and POA&M
success. "Impressive technical precision."
AFMC – U.S.

Air Force
Purple Team Engagement
(2022–2023) – $108K
Coordinated Red/Blue/SOC teams with strong reporting.
"Impressed with the level of integration and readiness." Department of Cybersecurity BPA (2020– Successfully coordinated multi-agency security delivery.

Over 30%
Contracts awarded were
urgent, high-risk and
compliance-mandated
cybersecurity initiatives
Over 1,000
Projects Delivered
Over $200M
in Lifetime Contracts

Page | xxviii
Customer Work Performed Customer Appreciation Summary
the Interior Present) – $26M+ "Strong collaboration and communication from GSG." U.S.

AbilityOne
Commission
Multi-Year FISMA Audit
Support (2020–2024) – $2M+
Strong PM oversight throughout each task year.
"Consistently delivered reliable results."
DOT – FHWA Cyber Risk Assessment
(2021) – $450K
Clear documentation and coordination. "Thorough and
well-managed effort."
Schedule
Customer Work Performed Customer Appreciation Summary
USDA – OIS
Security Assessments and
Pen Testing (2018–2024) –
$10M
Completed all the work on time. "Always prompt
and prepared."
AFMC – U.S.

Air Force
Purple Team Engagement
(2022–2023) – $108K
Delivered under tight timeline. "Met every milestone with precision."
Department of
the Interior
Cybersecurity BPA (2020–
Present) – $26M+
98% task order completion rate. "Responsive and reliable over 3 years."
U.S.

AbilityOne
Commission
Multi-Year FISMA Audit
Support (2020–2024) – $2M+
Timely across multiple years. "We relied on your timeliness and consistency."
Quality of Service
Customer Work Performed Customer Appreciation Summary
USDA – OIS
Security Assessments and
Pen Testing (2018–2024) –
$10M
Over twenty-five tests were delivered, zero
rework. "Impressive technical precision."
AFMC – U.S.

Air Force
Purple Team Engagement
(2022–2023) – $108K
Tailored simulations to expose readiness gaps. "Helped us understand where we stood."
Department of
the Interior
Cybersecurity BPA (2020–
Present) – $26M+
Delivered clear, actionable findings. "The team knew their stuff and produced useful results every time."
DHS – CISA
Priority Infrastructure Cyber
Support (2020–2021) –
$500K+
Sustained 24/7 support. "The support never dropped—
even under stress."
U.S.

AbilityOne
Commission
Multi-Year FISMA Audit
Support (2020–2024) – $2M+
Audit-ready and reliable. "Everything was exactly what we needed for FISMA submission."
DOT – FHWA Cyber Risk Assessment
(2021) – $450K
Detailed reporting and clarity. "Good detail and clear
technical recommendations."
Dept. of
Treasury/
AmeriCorps
FedRAMP and NIST
Documentation (2022) –
$500K+
Passed review with no revision. "Thank you for staying on top of the compliance mapping."
Fort Worth
Housing
Solutions
Portal Pen Testing (2023) –
$100K
Clear risk summary and guidance. "We tightened things up based on your findings."
Small Business
Customer Work Performed Customer Appreciation Summary
USDA – OIS
Security Assessments and
Pen Testing (2018–2024) –
$10M
"Impressive technical precision."
AFMC – U.S.

Air Force
Purple Team Engagement
(2022–2023) – $108K "Helped us understand where we stood."

Page | xxix
Customer Work Performed Customer Appreciation Summary
Department of
the Interior
Cybersecurity BPA (2020–
Present) – $26M+
"The team knew their stuff and produced useful results
every time."
U.S.

AbilityOne
Commission
Multi-Year FISMA Audit
Support (2020–2024) – $2M+ "Your staff did an outstanding job with our FISMA audits." Regulatory Compliance
Customer Work Performed Customer Appreciation Summary
USDA – OIS
Security Assessments and
Pen Testing (2018–2024) –
$10M
"Impressive technical precision."
AFMC – U.S.

Air Force
Purple Team Engagement
(2022–2023) – $108K "Helped us understand where we stood." Department of
the Interior
Cybersecurity BPA (2020–
Present) – $26M+
"The team knew their stuff and produced useful results
every time."
DHS – CISA
Priority Infrastructure Cyber
Support (2020–2021) –
$500K+
"The support never dropped—even under stress."
U.S.

AbilityOne
Commission
Multi-Year FISMA Audit
Support (2020–2024) – $2M+
"Everything was exactly what we needed for FISMA
submission."

Page | xxx
Department of Health and Human Services Legal Resource Professional

Page | xxxi

Page | xxxii
Wakulla County - Contractor Performance Evaluation Questionnaire

Page | xxxiii
Assessment Synopsis: Excellent
Department of Interior: Department of State
Assessment Synopsis: Very Good

Page | xxxiv

Page | xxxv

Page | xxxvi
U.S. Department of Agriculture (USDA) Office of Information Security (OIS)

Page | xxxvii
Assessment Synopsis: Quality and Cost Control Exceptional

Page | xxxviii

Page | xxxix
USDA Office of Information Security (OIS) Penetration Testing (2018) Assessment Synopsis: Quality Exceptional

Page | xl

Page | xli
Air Force: Buckley Garrison Medical Group
Assessment Synopsis: Exceptional

Page | xlii

Page | xliii

Page | xliv

Page | xlv

Page | xlvi
Office of Administrative Services – Internal Acquisition Division Assessment Synopsis: Quality Very Good

Page | xlvii

Page | xlviii
Buckley AFB Recommendation Letter

Page | xlix
City of New Orleans

Page | l

Page | li

Page | lii

Page | liii

Page | liv

Page | lv
U.S Naval Hospital, Guam
Assessment Synopsis: Good
State of Kansas: MHBE IT Consulting and Technical Support Services

Page | lvi
Assessment Synopsis: Exceptional

Page | lvii

Page | lviii

LEONARD TECHNOLOGY INC.
www.leonardtechinc.com | (631) 836-9593 | [email protected]

PROPOSAL FOR COMPREHENSIVE INFORMATION TECHNOLOGY SERVICES

SUBMITTED TO
City of Livingston, California
Merced County | Population 14,000 | General Law City
Submitted By Leonard Technology Inc.

Authorized Representative James Leonard, Director
Phone (631) 836-9593
Email [email protected]
Website www.leonardtechinc.com
Date of Submission May 29, 2026
RFP Reference City of Livingston — Request for Proposals for IT Services Submitted To Monica Cisneros, Deputy City Clerk | [email protected] Proposal Valid For 90 Days from Submission Date
Format PDF — submitted per RFP guidelines
Submitted in good faith. No lawsuits, judgments, liens, or investigations pending against Leonard Technology Inc.

LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Letter of Transmittal...................................................................................................................... 4 Executive Summary....................................................................................................................... 5 Key Differentiators......................................................................................................................... 5 Understanding Of The City Of Livingston Environment.................................................................6

1. GENERAL COMPANY INFORMATION..........................................................................................7 1a. Company Overview........................................................................................................................ 7 1b. Pending Lawsuits, Judgments, or Liens.......................................................................................8 1c. Current Investigations....................................................................................................................8

2. REFERENCES............................................................................................................................. 9 2a. Client References........................................................................................................................... 9 2b. Vendor References (Annual Obligation $48,000+).....................................................................10 2c. Technology Partner Ecosystem.................................................................................................. 12

3. STAFFING................................................................................................................................ 14 3a. Organizational Chart....................................................................................................................14 Dedicated Support Structure for the City of Livingston................................................................14 3b. Service Delivery Governance Model..................................................................................... 15 3c. Staffing Continuity & Operational Resilience......................................................................... 15 3d. Help Desk & Response Commitments.................................................................................. 16 3e. Evaluator Summary............................................................................................................... 16 3f. Staff Development & Training...................................................................................................... 17

4. SECURITY................................................................................................................................ 18 4a. Company Security Certifications.................................................................................................18 4b. Staff Security Certifications........................................................................................................ 18 4c. Background Checks — All Staff...................................................................................................18 4d. Company Security Policies — Client Access..............................................................................19 4e. Client Data Security Strategy.......................................................................................................19

5. SERVICES.................................................................................................................................... 21 5a. Desktop Support — Hardware & Software..................................................................................21 5b. Network Hardware & Operating System Support.......................................................................21 5c. Remote Access Support..............................................................................................................22 5d. Work Order / Ticket System........................................................................................................ 22 5e. Escalation — Chronic & Advanced Problems............................................................................. 22 5f. Help Desk Hours & Guaranteed Response Times...................................................................... 23 5g. Help Desk Statistics.....................................................................................................................23 5h. Key Staff Availability — Business Hours.....................................................................................24 5i. After-Hours Support......................................................................................................................24 5j. Penalties for Missed Response Times........................................................................................ 25 5k. On-Site Support — Responsibilities & Schedule.........................................................................25 Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 2 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary 5l. Help Desk Skill Sets — Advanced Issues.....................................................................................26 5m. Client Training............................................................................................................................. 26 5n. Backup Support............................................................................................................................26 5o. Disaster Recovery Support..........................................................................................................27 5p. Major Software Upgrades............................................................................................................27 5q. Patch Management..................................................................................................................... 28 5r. Network Downtime for Maintenance — Scheduling & Communication.................................... 28

6. MONITORING............................................................................................................................... 29 6a. Monitoring Tools & Strategies.....................................................................................................29 6b. Communication of Monitoring Results.......................................................................................29

7. MANAGEMENT............................................................................................................................ 30 7a. Reporting — System Status, User Needs, Change Management..............................................30 7b. Technician Assignment Changes............................................................................................... 30 7c. IT Strategic Planning....................................................................................................................30

8.DOCUMENTATION, RECORD KEEPING & REPORTING........................................................... 32 8a. Routine Reporting Procedures.................................................................................................... 32 8b. Documentation — Maintenance, Installation, Performance & Changes...................................32 8c. Transition Documentation — End of Contract............................................................................32

9. FEES............................................................................................................................................. 34 9a. Fee Structure................................................................................................................................ 34 9b. Environmental Changes — Price Adjustment.............................................................................35

10. OPTIONAL FEES........................................................................................................................37 Optional Service: Audio/Visual — Council Meeting Management.................................................. 37 Other Optional & Out-of-Scope Services...........................................................................................37

11. TRANSITION...............................................................................................................................38

12. MISCELLANEOUS..................................................................................................................... 39 12a. Certifications, Credentials & Licenses......................................................................................39 12b. What Makes Leonard Technology Unique................................................................................39 12c. CJIS Security Certificates — Number of Employees................................................................40 12d. CJIS Security Policy Familiarity................................................................................................ 40 12e. Technology Stack.......................................................................................................................41 12f. Incident Response — Security Events....................................................................................... 41 12g. Ransomware Response — Client History................................................................................. 42 12h. Backup Validation Strategy....................................................................................................... 42 12i. Third-Party Penetration Testing................................................................................................. 42 12j. PCI Compliance Familiarity........................................................................................................ 43 12k. Cloud Solutions & Additional Technology Options.................................................................. 43 Closing Statement....................................................................................................................... 44 Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 3 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Letter of Transmittal
May 29, 2026
Monica Cisneros, Deputy City Clerk
City of Livingston
1416 C Street, Livingston, CA 95334
[email protected]
Re: Request for Proposals for Information Technology Services — City of Livingston, CA Dear Ms. Cisneros and Members of the Selection Committee, Leonard Technology Inc. is pleased to submit this proposal to serve as the City of Livingston's Managed Information Technology Services partner. We understand that Livingston is a full-service general law city providing essential municipal services — including Public Safety — across six locations, and that the City requires an IT partner capable of delivering comprehensive, operationally reliable, and security-mature services under a fixed monthly pricing structure.

Since 2014, Leonard Technology has provided managed IT and help desk services to public-sector and institutional clients who depend on their IT infrastructure for daily operations and public accountability. We bring to this engagement direct experience with municipal environments, CJIS security awareness, multi-site support models, and the kind of named executive accountability that ensures the City always has a responsible partner — not an anonymous support queue.

This proposal responds directly to all twelve sections of the RFP Questionnaire in the required order.

Every commitment made herein is operational, verifiable, and backed by named personnel.

This proposal is valid for ninety (90) days from the date of submission. The undersigned is authorized to commit Leonard Technology Inc. to all terms contained herein.

James Leonard
Director, Leonard Technology Inc.
(631) 836-9593 | [email protected]
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 4 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Executive Summary
The City of Livingston needs more than just a vendor. It needs an IT partner who understands the demands of a multi-department city, the importance of Public Safety systems, and the responsibility of serving a public institution. Leonard Technology is that partner.

We deliver enterprise-grade, scaled managed IT services. We provide enterprise-level managed IT services designed for organizations that cannot take on extra risk. Our approach focuses on three main priorities: responsiveness, governance, and security. For a city with 14,000 residents and six locations, these qualities are not just important—they are the minimum standard for good IT service.

COMPLIANCE SUMMARY — AT A GLANCE
24×7/365 Support & Monitoring ✓ Included
CJIS Security Awareness & Addendum ✓ Included
On-Site Support (All 6 Locations) ✓ Included
Fixed Monthly Pricing (3+2 Year Term) ✓ Included
Cybersecurity / Endpoint Protection ✓ Included
Help Desk — Guaranteed Response Times ✓ Included
Backup & Disaster Recovery ✓ Included
Strategic IT Planning / vCIO ✓ Included
SCADA Awareness ✓ Included
Public Safety / CLETS Compliance ✓ Included
Weekly Reporting ✓ Included
Asset & License Tracking ✓ Included
VMware/Hyper-V Support ✓ Included
Documentation & Change Tracking ✓ Included
Key Differentiators
● Named executive accountability and direct escalation access ● Multi-site municipal support approach
● Security-first operating model
● Structured transition and onboarding process
● Fixed pricing model with transparent service scope
● Strategic technology planning and lifecycle guidance
Understanding Of The City Of Livingston Environment
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 5 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Leonard Technology understands that the City of Livingston operates a diverse municipal technology environment supporting multiple departments and critical public functions across six locations within the City. Based on the information provided in the RFP, the City's environment currently includes approximately 105 desktop and laptop systems, five servers, mobile devices, VoIP systems, Live Scan technology, cloud and local backup environments, Public Safety systems, and SCADA-adjacent infrastructure.

The City environment supports a broad range of municipal operations, including administration, public services, community development, and Public Safety functions. Because multiple departments rely upon technology systems to support daily operations, system availability, security, and rapid issue resolution are essential requirements.

Leonard Technology recognizes several priorities within the City's operating environment:
● Maintaining reliable operations across all six City locations ● Supporting users through responsive 24×7 help desk and technical services ● Protecting sensitive systems and information through proactive cybersecurity practices ● Maintaining operational continuity through monitoring, backup, and disaster recovery capabilities
● Supporting Public Safety systems while adhering to CJIS awareness requirements and controlled-access procedures
● Providing structured reporting, documentation, and strategic technology planning ● Supporting current infrastructure technologies including Microsoft environments, virtualization platforms, network infrastructure, remote access systems, and mobile technologies
Leonard Technology understands that successful technology support within a municipal environment requires more than resolving support tickets. It requires proactive management, strategic guidance, operational discipline, and clear accountability structures that reduce risk and support uninterrupted delivery of public services.

Our service delivery approach is therefore designed to function not simply as a technology vendor relationship, but as an operational partnership that supports the City's long-term technology objectives while minimizing disruption to day-to-day operations.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 6 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

1. GENERAL COMPANY INFORMATION
1a. Company Overview
Item Leonard Technology Inc.

Year Founded 2014
Years Providing Managed
IT & Help Desk
12 years (2014–present)
Number of Employees Dedicated U.S.-based technical, engineering, and support personnel supporting managed services, cybersecurity, cloud administration, and client operations
Types of Ownership Privately held U.S.-based corporation Office Location(s) United States-based operations supporting clients remotely and on-site as required
Number of Clients Active managed service clients across public-sector, institutional, and professional service environments
Average Client Size Organizations ranging from small municipal agencies to 50+ user institutional environments
Primary Contact James Leonard, Director | [email protected] | (631) 836-9593
Website www.leonardtechinc.com
Background & History
Leonard Technology Inc. was founded in 2014 with a clear goal: to give small and mid-size organizations without their own IT teams the same high-quality technology management that big companies receive. For over 12 years, we have focused on serving public-sector and institutional clients, including municipal agencies, housing authorities, libraries, legal organizations, and nonprofits, where IT problems can seriously affect people’s lives.

We believe in being directly accountable to our clients. Unlike large MSPs that send your requests to a general support pool, Leonard Technology assigns specific people to every project. James Leonard personally leads your account, along with a dedicated systems engineer who knows your City’s environment well, not just its support tickets.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 7 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary 1b. Pending Lawsuits, Judgments, or Liens
Leonard Technology Inc. has no pending lawsuits, judgments, or liens against the organization as a result of services provided, and no such matters that would negatively impact our ability to provide managed IT services to the City of Livingston.
1c. Current Investigations
Leonard Technology Inc. is not currently under investigation by any entity.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 8 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

2. REFERENCES
Leonard Technology provides managed IT services for organizations operating within multi-site, high-availability, and mission-critical environments where responsiveness, operational continuity, and structured service delivery are essential requirements. Our experience includes public-sector organizations, professional services environments, and distributed operational infrastructures requiring ongoing monitoring, help desk support, infrastructure administration, cybersecurity oversight, and strategic IT planning.

The following engagements demonstrate experience directly relevant to the City of Livingston's operational and technical requirements.
2a. Client References
Client / Environment Scope of Services Environment
Characteristics
Relevance to City of
Livingston
New York Public
Library (Active
Managed Services
Engagement)
Full managed IT services;
infrastructure
administration; user
support; vendor
coordination; proactive
monitoring; incident
management
Multi-location
public-sector
environment; 25–30
daily support tickets;
multiple servers;
uptime-sensitive
operations
Demonstrates experience
supporting public-sector
operations, distributed
environments, high user
activity, and environments
requiring operational
continuity and responsive
support
New York Law Firm
(Active Managed
Services
Engagement)
Managed infrastructure
support; server
administration;
cybersecurity oversight;
help desk support; onsite
support; vendor
coordination
Multi-site
Windows-based
environment; multiple
servers;
security-sensitive
operational environment
Demonstrates experience
supporting high-trust
environments requiring
access control,
operational stability, rapid
issue resolution, and
continuous monitoring
Enterprise ITSM
Deployments
(Multiple
Engagements)
Incident management
framework
implementation; service
workflows; operational
reporting; governance
support
Enterprise operational
environments with
structured support
requirements
Demonstrates experience
implementing repeatable
support processes,
governance models,
escalation procedures,
and performance visibility
frameworks
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 9 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Key Operational Outcomes
● Continuous support across distributed environments with ongoing operational requirements ● Structured incident management and escalation workflows improving issue visibility and response management
● Proactive monitoring and rapid response approach reducing operational disruption ● Management of multi-vendor technology environments through a single point of accountability
● Experience supporting Microsoft environments, servers, endpoints, cloud platforms, and infrastructure systems
● Long-term operational support focused on continuity, responsiveness, and user experience Evaluator Summary
Requirement Leonard Technology Experience Alignment
Multi-Site Support ✓ Demonstrated
Public Sector Experience ✓ Demonstrated
Help Desk Operations ✓ Demonstrated
Infrastructure
Administration
✓ Demonstrated
Cybersecurity Support ✓ Demonstrated
Vendor Coordination ✓ Demonstrated
24×7 Monitoring ✓ Demonstrated
Strategic IT Guidance ✓ Demonstrated
2b. Vendor References (Annual Obligation $48,000+)
Leonard Technology works closely with technology vendors, cloud and telecom providers, software companies, and infrastructure manufacturers as part of our managed services. Instead of having clients handle multiple support channels on their own, we serve as the main point of contact for vendor coordination, escalation, issue tracking, and communication.

We use our vendor relationships to help resolve issues quickly, plan product lifecycles, coordinate warranties, manage licenses, and handle technical escalations.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 10 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Vendor Category Services Managed Relevance to City of Livingston Microsoft Ecosystem Microsoft 365 administration,
licensing, cloud support, user
management, escalation support
Supports City's Microsoft
environment, user management,
and productivity systems
Network & Infrastructure
Vendors
Firewall management, switches,
wireless infrastructure, endpoint
connectivity
Supports secure and stable
infrastructure operations across
City locations
Telecommunications
Providers
Voice services, internet
connectivity, vendor coordination,
service escalation
Supports operational continuity
and communication availability
Security Vendors Endpoint security, monitoring tools,
threat detection platforms
Supports proactive cybersecurity
oversight and risk reduction
Hardware Manufacturers Device procurement, warranty
coordination, lifecycle
management
Supports endpoint reliability and
technology lifecycle planning
Evaluator Summary
Requirement Leonard Technology Response
Vendor Coordination ✓ Included
Escalation Management ✓ Included
License Management ✓ Included
Warranty Coordination ✓ Included
Telecommunications Support ✓ Included
Single Point of Accountability ✓ Included
Leonard Technology assumes ownership of vendor interactions to reduce administrative burden on client personnel and maintain accountability through issue resolution and ongoing service delivery.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 11 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary 2c. Technology Partner Ecosystem
Leonard Technology maintains operational experience across leading technology platforms commonly used within municipal and multi-site environments. These platforms support our ability to provide responsive support, rapid escalation, proactive monitoring, cybersecurity management, infrastructure administration, and lifecycle planning.

Technology Partner /
Platform
Service Area Relevance to City of Livingston
Microsoft Microsoft 365, user administration,
cloud services, licensing
management
Supports user productivity, identity
management, and cloud administration
requirements
VMware / Hyper-V Virtualization and server
environments
Supports server administration and
infrastructure continuity
Veeam Backup and disaster recovery
solutions
Supports backup integrity, business
continuity, and recovery validation
Cisco / Ubiquiti Network infrastructure and
connectivity
Supports stable and secure network
operations across multiple locations
NinjaOne Remote monitoring and
management (RMM)
Supports proactive monitoring, patching,
asset visibility, and issue detection
HaloPSA Ticketing and service management
platform
Supports help desk operations, workflow
visibility, and SLA tracking
SentinelOne Endpoint detection and response
(EDR)
Supports cybersecurity monitoring and
threat response
Microsoft Intune Endpoint and mobile device
management
Supports device control, policy
enforcement, and mobile administration
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 12 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Evaluator Summary
Requirement Leonard Technology Response
Infrastructure Monitoring ✓ Included
Cybersecurity Monitoring ✓ Included
Help Desk Workflow Tracking ✓ Included
Backup & Recovery ✓ Included
Endpoint Management ✓ Included
Vendor Escalation Support ✓ Included
Leonard Technology uses these platforms as operational tools supporting service delivery, visibility, and accountability rather than as isolated technologies. This approach provides the City with a structured and scalable support model that aligns with operational requirements and long-term technology planning.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 13 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

3. STAFFING
Leonard Technology offers a service delivery structure built for cities that need quick responses, steady operations, strong cybersecurity, and clear accountability across departments and locations.

The City of Livingston needs a technology partner to provide daily user support, keep critical systems running, assist Public Safety, respond to emergencies, and offer strategic guidance.

Leonard Technology’s team brings executive oversight, operational management, technical expertise, cybersecurity skills, and a clear escalation process to keep services running smoothly.

Our support model avoids relying on a single person and ensures clear ownership and accountability across every service area.
3a. Organizational Chart
Leonard Technology's organizational structure is flat by design. Named accountability flows directly from executive leadership to the client, without the bureaucratic layers that delay response and erode institutional knowledge.

Dedicated Support Structure for the City of Livingston
Role Assigned
Resource
Primary Responsibilities Interaction with
City
Executive Account
Director
James Leonard Executive oversight, escalation
authority, contract performance
accountability, executive
communication
Quarterly reviews
and executive
escalations
Service Delivery & Client
Success Manager
Xavier Fabre Service coordination, ticket
visibility, SLA reporting, issue
ownership, communication
management
Primary operational
contact
Incident Command &
Escalation Lead
Samuel Multidor Critical incident response, major
outage management, coordination
of technical teams
Priority incidents
and emergency
events
Senior Infrastructure &
Network Engineer
Mark Rushie Server administration, network
systems, virtualization,
infrastructure changes, system
performance
Infrastructure
initiatives and
escalations
Microsoft 365 & Cloud
Systems Administrator
Jonathan
Alexandre
Identity management, Microsoft
administration, cloud systems,
licensing, user lifecycle
management
User administration
and cloud support
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 14 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Help Desk Operations
Lead
Steven Gustave Day-to-day technical support, ticket
ownership, user issue resolution,
onboarding/offboarding support
Daily user
interaction
Systems & Security
Administrator
Farid Mohammed Active Directory, permissions
management, endpoint
administration, security support
Access and
security
administration
Strategic Technology
Advisor (vCIO)
Leonard
Technology
Leadership Team
Technology planning, lifecycle
management, budgeting guidance,
strategic recommendations
Executive planning
sessions
All assigned personnel maintain defined backup coverage responsibilities to ensure uninterrupted service delivery and eliminate operational dependency on any single individual. 3b. Service Delivery Governance Model
The City will receive a structured governance model that establishes clear accountability for every request, issue, and service activity.

Governance components include:
● Dedicated primary point of accountability
● Defined escalation hierarchy
● Named ownership of all tickets and requests
● Weekly operational review reporting
● Monthly service performance reporting
● Quarterly technology planning meetings
● Executive escalation procedures
● Documented communication protocols
No request enters a queue without ownership, no issue remains unresolved without escalation, and no critical event progresses without active management. 3c. Staffing Continuity & Operational Resilience
Leonard Technology recognizes that municipal operations cannot depend upon a single technical resource. Service continuity for the City of Livingston is maintained through a structured staffing model designed to eliminate key-person dependency and maintain uninterrupted support delivery.

Continuity measures include:
● Cross-trained technical resources assigned to critical service areas ● Secondary engineering coverage for all major infrastructure systems ● Centralized documentation and knowledge management systems ● Standardized operational procedures and service workflows ● Escalation redundancy across technical teams
● Formal knowledge transfer procedures for personnel changes ● Service oversight through executive and operational management Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 15 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary This approach ensures that service delivery remains stable and responsive regardless of staffing changes or personnel availability.
3d. Help Desk & Response Commitments
Service Function Commitment
Support Channels Phone, Email, Web Portal
Business Hour Coverage Included
Emergency Support Coverage 24×7×365
Critical Incident Response Within 15 Minutes
High Priority Response Within 1 Hour
Senior Engineer Escalation Immediate for Priority 1 Events User Communication Throughout Resolution Lifecycle
On-Site Dispatch Same-Day for Critical Incidents
Scheduled On-Site Support Coordinated with City requirements 3e. Evaluator Summary
Requirement Leonard Technology Response
Dedicated Named Team ✓ Included
Executive Oversight ✓ Included
Help Desk Resources ✓ Included
Senior Infrastructure Support ✓ Included
Incident Command Structure ✓ Included
Cybersecurity Support ✓ Included
Strategic Technology Guidance ✓ Included
Continuity & Backup Staffing ✓ Included
24×7 Emergency Support ✓ Included
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 16 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Municipal Service Governance ✓ Included
Why This Reduces Risk for the City
Leonard Technology's staffing structure minimizes operational risk by combining dedicated accountability, technical depth, structured escalation, staffing redundancy, and governance oversight. This approach ensures that support remains responsive, visible, and consistent across all City departments and operational functions.
3f. Staff Development & Training
● Annual certification maintenance requirements for all support staff ● Ongoing Microsoft and security vendor training via partner program access ● Internal knowledge-sharing sessions on new technologies, threats, and client environments ● CJIS Security Policy training for all staff with law enforcement system access ● Regular review of cybersecurity alerts, threat intelligence feeds, and vendor advisories Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 17 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

4. SECURITY
Security is not a service add-on at Leonard Technology — it is the foundation of our service delivery model. Every aspect of how we access, monitor, manage, and document client systems is governed by security-first principles.
4a. Company Security Certifications
Certification / Framework
Alignment
Status & Year
CIS Controls v8 Alignment Active — framework governing all client security posture management
NIST Cybersecurity Framework
(CSF)
Active — applied to risk identification, protection,
detection, response, and recovery
Microsoft Security Baseline Active — applied to all Windows, M365, and Azure environments
CJIS Security Policy Familiarity Active — all staff with Public Safety access trained on CJIS Security Policy
4b. Staff Security Certifications
Staff Member Security Certifications
Senior Cloud DevOps
Engineer
SC-900 (Microsoft Security Fundamentals), AZ-104 (Azure Admin), AZ-400 (DevOps Engineer Expert), Google
Cybersecurity Professional Certificate
Mark Rushie Google Cybersecurity Professional Certificate, CompTIA Network+, CompTIA A+, AWS Cloud Practitioner
Help Desk Team CompTIA A+ or equivalent; security awareness training maintained
All Client-Facing Staff CJIS Security Policy training (for Public Safety system access); background-checked prior to engagement
4c. Background Checks — All Staff
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 18 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary All Leonard Technology staff who access client systems undergo a formal background verification process prior to any client engagement. For the City of Livingston specifically:
• All staff accessing Public Safety systems will comply with the City's fingerprinting and criminal history check process conducted by the City's Police Department. • All applicable staff will sign the required CJIS Security Addendum. • CLETS and FBI CJIS Security Policy compliance will be maintained for all staff interfacing with Law Enforcement systems.
• Unique and identifying system usernames will be maintained for all Leonard Technology personnel — ensuring accurate access logs at all times. 4d. Company Security Policies — Client Access
Policy Area Leonard Technology Standard
Access Control Least-privilege access model; role-based permissions; no shared accounts or credentials
Unique Usernames All staff maintain unique, identifying system usernames on all City systems — required and enforced
MFA Enforcement Multi-factor authentication required for all remote access and privileged accounts
Password Policy Complex, rotating passwords managed via approved password management tooling
Remote Access All remote access conducted via encrypted, audited sessions — VPN or equivalent
Session Logging All remote support sessions logged with timestamps, user identification, and activity records
Offboarding Immediate credential revocation upon staff separation — documented in 24 hours
Data Handling Client data is never stored on Leonard Technology infrastructure without written authorization
4e. Client Data Security Strategy
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 19 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary i. Security Alerts & Intelligence
● Subscription to Microsoft Security Intelligence and vendor-specific threat feeds ● Active monitoring of CISA (Cybersecurity & Infrastructure Security Agency) advisories ● Participation in MS-ISAC (Multi-State Information Sharing and Analysis Center) — critical for municipal clients
● RMM platform alerts and automated threat detection integrated with SOC monitoring ii. Security Event Notification & Management
● P1 security incidents trigger immediate notification to City leadership — within 15 minutes of confirmation
● Documented incident response plan executed immediately upon confirmed security event ● All security events logged, tracked, and reported in monthly security summary reports ● Post-incident root cause analysis delivered within 5 business days of resolution iii. Mobile Device Security
● MDM (Mobile Device Management) enrollment for all City-managed smartphones and tablets (iOS and Android)
● Remote wipe capability for lost or stolen devices
● MFA enforcement for all mobile email and M365 access
● Application control and device encryption required for Public Safety mobile devices iv. Security Best Practices — Enforcement
● Monthly security awareness training with phishing simulation campaigns for all staff ● Quarterly security posture review aligned to CIS Controls and NIST CSF ● Patch compliance enforced with automated reporting — no device more than 30 days behind on critical patches
● Annual review of CJIS compliance for all Public Safety-adjacent staff Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 20 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

5. SERVICES
5a. Desktop Support — Hardware & Software
Leonard Technology provides comprehensive Tier 1, 2, and 3 desktop support for all City staff across all six locations. Support covers the full hardware and software lifecycle for approximately 105 desktop computers and laptops (various brands), 5–10 iPads, and 20+ smartphones.

Desktop Support Category Leonard Technology Coverage
Hardware — Desktops &
Laptops
Diagnosis, repair coordination, replacement setup, configuration, and imaging for all ~105 devices
Operating System Windows 10/11 installation, configuration, updates, and troubleshooting
Microsoft 365
Applications
Full support: Outlook, Word, Excel, PowerPoint, Teams,
SharePoint, OneDrive
Mobile Devices Support for 5–10 iPads and 20+ smartphones — iOS and Android; MDM enrollment
Application Support Installation, configuration, licensing, and troubleshooting for business applications including Chameleon software
Printer & Peripheral
Support
Configuration and troubleshooting for printers, scanners, and connected peripherals
Live Scan Fingerprinting
Equipment
Support coordination for Live Scan devices per Public Safety requirements
5b. Network Hardware & Operating System Support
The City's network environment includes Cisco, Juniper, and Ubiquiti routers and switches across six locations. Leonard Technology provides full support and monitoring for all network infrastructure:
● Configuration, monitoring, and maintenance of all routers, switches, and access points (Cisco/Juniper/Ubiquiti)
● Firewall management — rule review, policy enforcement, VPN configuration and support ● All five servers supported: patching, performance monitoring, capacity management, and warranty tracking
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 21 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary ● VMware ESX and Hyper-V virtualization support — VM management, snapshot policy, and host maintenance
● SCADA equipment awareness — Leonard Technology is familiar with SCADA environments and will coordinate support with the City's operational technology team to avoid disruption ● Windows Server environment: Active Directory, DNS, DHCP, file server, Group Policy management
5c. Remote Access Support
● Troubleshooting of VPN connectivity, Terminal Server/Remote Desktop access, and remote client configuration
● Support for Squad Cars — remote/cellular terminal services, MDM management, and device connectivity
● Remote support for laptops, tablets, smartphones, and field personnel across all six City locations
● Chameleon software/server remote access support and coordination 5d. Work Order / Ticket System
All support requests — regardless of how they are received — are logged in Leonard Technology's professional PSA (Professional Services Automation) ticketing system. No request goes undocumented.

Ticketing Element Standard
Intake Channels Phone, email, web portal — all create a ticket automatically Ticket Acknowledgment Immediate automated confirmation; human response within SLA timeframe
City Access Read-only portal access for City leadership and designated contacts
Reporting Weekly and monthly ticket summary reports provided to City Escalation Tracking All escalations documented with timestamps and resolution notes
5e. Escalation — Chronic & Advanced Problems
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 22 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Escalation Trigger Process
Ticket unresolved after
SLA target
Automatic escalation flag; Systems Engineer review within 1 business day
Same issue recurring 3+
times
Root cause analysis initiated; documented in monthly report to City
P1 Critical incident Immediate escalation to Systems Engineer and James Leonard; City notified within 15 minutes
Security event confirmed SOC escalation activated; CJIS protocols followed for Public Safety-adjacent systems
Infrastructure anomaly Proactive escalation from monitoring platform to engineering team before user impact
5f. Help Desk Hours & Guaranteed Response Times
Leonard Technology provides 24/7/365 help desk coverage — including on-call, after-hours on-site, and remote support — as required by the City's RFP.

Severity Response Time Resolution Target Examples
Critical (P1) 15 Minutes Continuous Effort Network outage, server failure, ransomware, Public Safety
system loss, SCADA disruption
High (P2) 1 Hour Same Business Day Individual workstation failure, email outage, VoIP failure,
remote access loss
Medium (P3) 4 Business Hours 1 Business Day Software issues, slow performance, mobile device,
non-urgent application
problems
Low (P4) Next Business Day 3 Business Days General questions, account provisioning, training requests,
non-urgent changes
5g. Help Desk Statistics
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 23 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Metric Leonard Technology Performance
Average Acknowledgment
Time
Under 5 minutes for all inbound contacts during business hours; within SLA after-hours
Average Time to Resolution Tier 1 issues: same session or within 2 hours. Tier 2/3: within SLA targets above.

First-Call Resolution Rate 75–80% target first-contact resolution rate for Tier 1 support requests through structured triage and standardized support workflows
Nature of Support Calls Typical distribution: ~40% M365/application, ~25% hardware, ~15% connectivity, ~10% account/access, ~10% other
Monthly Ticket Volume Monthly ticket volume is monitored continuously and reported through weekly and monthly operational reporting to identify trends, recurring issues, and service improvement
opportunities.
5h. Key Staff Availability — Business Hours
Role Availability
James Leonard —
Director
Available by phone and email during business hours; emergency escalation 24/7
Systems Engineer (vCIO) Available during business hours for all Tier 2/3 and Terminal Server, Exchange, VMware, and advanced issues
Mark Rushie — Senior
Technologist
Available during business hours; coordinates on-site support scheduling
Help Desk Team Staffed during business hours; on-call rotation for after-hours and weekends
5i. After-Hours Support
Leonard Technology provides 24/7/365 on-call support for Critical (P1) and High (P2) incidents outside normal business hours. Our after-hours response structure is as follows:

Parameter Commitment
After-Hours Coverage 24/7/365 — including evenings, weekends, and holidays Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 24 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Parameter Commitment
P1 — Critical Response 15 minutes — remote triage initiated immediately; on-site dispatch if remote resolution fails
P2 — High Response 1 hour — remote triage; on-site if required and authorized P3/P4 — Non-Critical Handled next business day unless City determines elevated priority
Average After-Hours
Response Average response performance remains within committed SLA targets and is measured through monthly service reporting and operational dashboards.

On-Call Escalation Path Help Desk on-call → Systems Engineer → James Leonard (for confirmed P1 events)
5j. Penalties for Missed Response Times
Leonard Technology is prepared to include service credit provisions in the services agreement for confirmed failures to meet guaranteed P1 and P2 response times. Specific penalty structures will be negotiated as part of the contract. We track all SLA performance internally and report compliance monthly — giving the City full visibility without waiting for a missed SLA to surface. 5k. On-Site Support — Responsibilities & Schedule
The City of Livingston operates across six locations. Leonard Technology provides on-site support for all services that require in-person presence — including workstation setup, hardware replacement, infrastructure maintenance, and physical network changes.

On-Site Parameter Leonard Technology Commitment
Scheduled On-Site Visits One scheduled on-site service day per week (8 hours) with additional same-day emergency dispatch support for Priority 1 incidents and approved project activities as required.

P1 On-Site Dispatch After remote efforts exhausted — same-day dispatch for Critical incidents
Locations Covered All six City locations within Livingston city limits Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 25 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary On-Site Parameter Leonard Technology Commitment
On-Site Responsibilities PC setup and configuration, hardware installation, cabling and connectivity, peripheral setup, user orientation, physical infrastructure inspection
Coordination On-site schedules coordinated with City department heads to minimize operational disruption
5l. Help Desk Skill Sets — Advanced Issues
Advanced Skill Area Leonard Technology Coverage
Terminal Server / Remote
Desktop Services
Senior DevOps Engineer — Azure Virtual Desktop, RDS/Terminal Server configuration, session management
Exchange / M365 Mail Full Exchange Online and on-prem Exchange support; mail flow, anti-spam, Outlook configuration
VMware ESX / Hyper-V Host server management, VM deployment, snapshot policy, resource allocation, migration
Active Directory / Group
Policy
AD administration, GPO management, OU structure, user/group provisioning
Chameleon Software Application support and server management coordination VoIP / Analog Telephone VoIP system administration; troubleshooting; analog line support; moves/adds/changes
SCADA Awareness Awareness of SCADA operational boundaries; coordination with operational technology team
5m. Client Training
● Security awareness training — monthly modules for all City staff (phishing simulation, data handling, password hygiene)
● Microsoft 365 end-user training — Teams, SharePoint, OneDrive, Outlook — delivered on request
● New employee IT orientation — device setup walkthrough, helpdesk contact procedures, remote access training
● Department-specific training on supported applications (Chameleon, SCADA-adjacent systems) coordinated with City leadership
● Leonard Technology maintains referral relationships with Microsoft-certified training providers for advanced or specialized training needs
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 26 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary 5n. Backup Support
Leonard Technology manages and monitors both local and cloud backup systems for all covered servers and critical data per the City's current environment (local and remote cloud backup).

Backup Element Commitment
Coverage All 5 servers + cloud-based data (email, files, critical applications)
Backup Frequency No less than every 4 hours for critical systems; daily for standard workloads; continuous incremental where feasible
Retention Minimum 30-day local and cloud retention; extended retention available
Monitoring All backup jobs monitored — failures trigger alerts and remediation before the next scheduled backup
Restore Testing Annual full restore test with documented results provided to the City
Cloud Backup Managed cloud backup for off-site redundancy — geographically separated from local backup
5o. Disaster Recovery Support
● Documented Disaster Recovery (DR) plan maintained for all covered systems — reviewed and updated annually
● Defined RTO (Recovery Time Objective) and RPO (Recovery Point Objective) for each covered system tier
● DR testing conducted annually — results documented and reported to City leadership ● Ransomware-specific recovery playbook maintained and tested separately from standard DR ● Geographic redundancy for backup storage — recovery from cloud if local infrastructure is compromised
5p. Major Software Upgrades
Major software upgrades (e.g., Windows OS version upgrades, server OS migrations, major application version changes) are planned and coordinated with City leadership. They are scheduled during approved maintenance windows with documented rollback procedures. Leonard Technology's base managed services scope includes routine upgrades for covered systems.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 27 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Projects involving significant migration effort (e.g., full OS migration across all endpoints, server OS upgrade with application compatibility testing) are scoped separately and presented to the City for approval with a fixed project fee before work begins.
5q. Patch Management
Patch Parameter Leonard Technology Standard
Responsible Party Leonard Technology — fully managed; no City action required Microsoft / Windows
Patching
Monthly — aligned to Microsoft's Patch Tuesday cycle; critical patches deployed within 72 hours of release
Third-Party Software Monthly sweep; critical application vulnerabilities patched within 72 hours of vendor release
Server Patching Monthly — scheduled during approved maintenance windows; rollback plan in place
Automated Tool NinjaOne Remote Monitoring & Management platform with centralized patch deployment and compliance reporting.

Patch Reporting Weekly patch compliance report provided to City; non-compliant devices flagged for remediation
Scope All covered endpoints (~105 PCs/laptops), ~5 servers, and applicable mobile devices
5r. Network Downtime for Maintenance — Scheduling & Communication ● All scheduled maintenance windows proposed at least 5 business days in advance and require City approval
● Emergency maintenance coordinated with City IT contact as quickly as operationally possible ● Maintenance scheduled outside business hours by default (evenings or weekends) unless City specifies otherwise
● City staff notified via email with: scheduled window, systems affected, expected duration, and rollback plan
● Confirmation communication sent upon completion — or immediately if rollback was required Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 28 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

6. MONITORING
6a. Monitoring Tools & Strategies
Leonard Technology provides 24/7/365 proactive monitoring of the City's entire managed IT environment using an enterprise-grade RMM (Remote Monitoring and Management) platform integrated with automated alerting and human analyst review.

Monitoring Category Tools & Coverage
RMM Platform NinjaOne — monitors all covered endpoints, servers, network devices, patch compliance, and system health continuously.

Network Monitoring All Cisco/Juniper/Ubiquiti devices monitored for availability, performance, and security anomalies
Server Monitoring All 5 servers monitored: CPU, memory, disk, event logs, service health, backup status
Endpoint Monitoring ~105 endpoints monitored for patch compliance, security agent health, and performance
Security Event Monitoring EDR/endpoint protection events correlated; anomalous behavior triggers immediate alert
Backup Monitoring All backup jobs monitored — failures generate immediate alerts SCADA Proximity Leonard Technology is aware of SCADA systems and monitors network health to ensure IT changes do not impact operational technology
Alert Response All alerts reviewed by a human technician — not auto-dismissed; documented in ticketing system
6b. Communication of Monitoring Results
● Weekly report delivered to City leadership: monitoring summary, active alerts, patch compliance, backup status, performance flags
● Monthly report: full system health summary, SLA compliance, security events, trending analysis, and recommendations
● Real-time alerts for P1/P2 conditions communicated immediately to City IT contact and escalation path
● City has read-only access to the monitoring dashboard for current environment status at any time.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 29 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

7. MANAGEMENT
7a. Reporting — System Status, User Needs, Change Management Report Type Frequency & Content
Weekly Operations Report Monitoring summary; patch compliance; backup status; open tickets; critical alerts actioned
Monthly Service Report SLA compliance by priority; ticket volume and resolution rates; security events; hardware health; end-of-life tracking; recommendations
Quarterly Business
Review
Strategic IT review; vCIO roadmap update; budget planning input; infrastructure health assessment
Incident Reports Delivered within 5 business days of any P1/P2 event resolution — root cause, response timeline, remediation actions
Change Notifications Advance notice for all planned changes — scope, timing, risk, and rollback plan provided before execution
7b. Technician Assignment Changes
Leonard Technology will not change the technician assigned to the City of Livingston without advance notice to City leadership. In the event of a staffing change:
• The City will be notified in writing a minimum of 15 business days in advance of any planned technician change
• A structured knowledge transfer process will be conducted — the incoming technician will shadow the outgoing technician and validate all documentation before assuming account responsibility
• City approval of the proposed replacement is expected before the transition is finalized • Emergency replacements (e.g., unexpected departure) will be communicated within 24 hours with a transition plan
7c. IT Strategic Planning
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 30 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Leonard Technology provides vCIO (virtual Chief Information Officer) strategic IT planning as part of our managed services engagement. Strategic planning for the City of Livingston includes:
● Annual technology roadmap aligned to City's operational goals and budget cycle ● Equipment lifecycle tracking — proactive identification of end-of-life hardware with replacement budget estimates
● IT budget planning support — annual and multi-year cost projections for infrastructure and licensing
● Vendor management guidance — software licensing, hardware refresh, and cloud services optimization
● Security posture roadmap — annual gap assessment against CIS Controls and NIST CSF with prioritized remediation plan
● Technology briefings for City leadership — plain-language summaries of relevant technology changes, threats, and opportunities
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 31 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

8.DOCUMENTATION, RECORD KEEPING & REPORTING
8a. Routine Reporting Procedures
Leonard Technology follows a structured documentation and reporting cadence for all City of Livingston engagements. No information is stored solely in staff memory — all knowledge is captured in the documentation system and accessible to City leadership at any time.

Report Frequency & Delivery
Weekly Operations Report Delivered every Monday to City IT contact — covers prior week's monitoring, tickets, and patches
Monthly Service Report Delivered by the 5th of each month — full service summary, SLA compliance, open items
Quarterly Business Review Scheduled with City leadership — strategic roadmap, budget review, infrastructure health
Security Event Report Delivered within 5 business days of any confirmed P1 security event Annual DR Test Report Delivered within 10 business days of annual restore testing Ad-Hoc Reports Available on request — any aspect of the City's managed environment 8b. Documentation — Maintenance, Installation, Performance & Changes • All maintenance activities documented in the ticketing system with timestamps, technician identification, and resolution notes
• All system changes documented in the change log — before and after state, approver, and rollback record
• Network topology diagram and asset inventory maintained in the documentation system — updated within 5 business days of any change
• Software and license inventory maintained and current — includes all covered applications, version, expiration, and vendor contact
• Server and endpoint configuration baselines documented — deviations flagged in monthly report
• All documentation stored in a secure, City-accessible location — City retains ownership of all documentation at all times
8c. Transition Documentation — End of Contract
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 32 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary In the event the City chooses to transition to a new provider, Leonard Technology will provide a complete, organized documentation package within 30 days of contract end, including:
● Full network topology and infrastructure diagram (current at time of transition) ● Complete asset inventory — hardware, software, licenses, warranties, and vendor contacts ● Server and network device configuration exports and baselines ● Active Directory structure, user accounts, and group policy documentation ● Backup system configuration, schedules, retention policies, and last verified restore record ● All vendor account credentials (with City's authorization) and support contacts ● Open ticket summary and any known pending issues
● Security event log summary for the trailing 12 months Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 33 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

11. TRANSITION
Leonard Technology's onboarding process is designed to establish service continuity from day one.

The City of Livingston will not experience a service gap, security window, or operational disruption during the transition to Leonard Technology.

Phase Timeline Activities Owner
Phase
1Discovery
Week 1–2 Full environment audit: all 6 locations, ~105 endpoints, 5 servers, network hardware, mobile devices, VoIP, SCADA
boundaries, Chameleon software, backup status, vendor
accounts, license inventory
Systems Engineer + Mark
Rushie
Phase
2Document
ation
Week 2–3 Validate and update all existing documentation; create network topology diagram; asset inventory; server
configuration baseline; CJIS compliance review; AD
structure review; backup job validation
Systems Engineer
Phase
3Security
Setup
Week 3–4 Deploy RMM agents across all endpoints and servers; configure endpoint protection; validate backup monitoring; establish MFA and access controls; fingerprinting/CJIS
onboarding for Public Safety access
Systems Engineer + Mark
Rushie
Phase
4Service
Activation
Week 4–5 Activate all SLA commitments; communicate to all City staff (helpdesk contact, escalation path, ticketing portal); configure weekly/monthly reporting templates; confirm
on-site visit schedule with City
James Leonard
Phase
5Stabilizati
on
Week 6–8 First weekly reports delivered; first monthly report delivered; initial vCIO briefing with City leadership; identify immediate improvement priorities; confirm SCADA
boundary coordination with operational team
James Leonard + Systems
Engineer
Note: All CJIS fingerprinting and background check requirements for Public Safety system access will be initiated at the beginning of Phase 1 and completed prior to any Public Safety system access by Leonard Technology staff. Unique usernames for all personnel will be established before any system access is granted.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 37 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

12. MISCELLANEOUS
12a. Certifications, Credentials & Licenses
Certification / Credential Held By
AZ-400 — Microsoft DevOps
Engineer Expert
Senior DevOps Engineer (Company-sponsored)
AZ-104 — Microsoft Azure
Administrator Associate
Senior DevOps Engineer
SC-900 — Microsoft Security
Fundamentals
Senior DevOps Engineer
AZ-900 — Microsoft Azure
Fundamentals
Senior DevOps Engineer + Mark Rushie
AI-900 / DP-900 / PL-900 Senior DevOps Engineer
AWS Certified Cloud Practitioner Mark Rushie
Google Cybersecurity Professional
Certificate
Senior DevOps Engineer + Mark Rushie
CompTIA A+ Mark Rushie
CompTIA Network+ Mark Rushie
CompTIA Healthcare IT Technician Mark Rushie
MSIS — University of Phoenix Mark Rushie
B.S. Electrical Engineering —
Florida International University
Senior DevOps Engineer
[Insert any additional company or
staff certifications]
[Company / Staff]
12b. What Makes Leonard Technology Unique
Differentiator Why It Matters for the City of Livingston Named Executive
Accountability
James Leonard is directly reachable — not a call center. The City always knows who is responsible.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 38 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Differentiator Why It Matters for the City of Livingston Right-Sized for Municipal
Environments
We are not a large national MSP with small-city accounts buried in support queues. Every client receives
enterprise-grade services at the right scale.
12 Years of Public-Sector
Experience
We understand the pace, accountability standards, and
compliance requirements of local government — including CJIS, Public Safety systems, and multi-department operations.

Co-Managed, Collaborative
Model
We work alongside City leadership — providing IT expertise without replacing institutional knowledge. Department heads stay informed; the City stays in control.

SCADA Awareness Our team understands the boundary between IT and operational technology. We coordinate with the City's OT team rather than creating risk through uninformed changes.

All-Inclusive Fixed Pricing No surprise invoices. The City knows exactly what IT costs every month for the contract term.

Low-Risk Transition Our 5-phase 90-day onboarding is designed to protect continuity from day one. The City will not experience disruption during the transition.
12c. CJIS Security Certificates — Number of Employees
All Leonard Technology personnel assigned to support the City of Livingston's Public Safety systems will be trained on and compliant with the FBI CJIS Security Policy. Specific counts of CJIS-trained personnel assigned to this engagement will be confirmed following contract award and prior to any Public Safety system access. Leonard Technology commits to maintaining a minimum of two CJIS-trained personnel assigned to this engagement at all times CJIS-trained staff at all times for this engagement.
12d. CJIS Security Policy Familiarity
Leonard Technology is familiar with the FBI CJIS Security Policy and its requirements for organizations that access, transmit, store, or process Criminal Justice Information (CJI). Our CJIS compliance approach includes:
● All staff accessing Public Safety systems will sign the City's CJIS Security Addendum prior to access
● Compliance with CLETS and FBI CJIS Security Policy for all Law Enforcement system interactions
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 39 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary ● Unique, identifying system usernames maintained for all personnel — ensuring accurate audit trails
● Multi-factor authentication enforced for all remote access to Public Safety-adjacent systems ● Annual CJIS Security Policy training for all applicable staff ● Security event logs for Public Safety systems retained per CJIS requirements (minimum 90 days)
12e. Technology Stack
Stack Category Leonard Technology Platform
RMM (Remote Monitoring
& Management)
NinjaOne
PSA (Ticketing / Help
Desk)
HaloPSA
Endpoint Protection / EDR SentinelOne
BDR (Backup & Disaster
Recovery)
Veeam
Secure Email Gateway Microsoft Defender for Office 365
Security Awareness
Training
KnowBe4
MDM (Mobile Device
Management)
Microsoft Intune
Password Management IT Glue secure credential vault
Documentation Platform IT Glue
Identity & Access Microsoft Entra ID (Azure AD); Active Directory; MFA (MS Authenticator)
12f. Incident Response — Security Events
IR Phase Leonard Technology Action
Detect Endpoint protection and RMM monitoring identify threat indicators; SOC alert generated
Analyze Human analyst reviews alert, confirms severity, classifies P1/P2/P3 security event
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 40 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary IR Phase Leonard Technology Action
Contain Affected device isolated from network immediately; firewall rules updated if required
Eradicate Malware removal; credential reset for compromised accounts; root cause analysis initiated
Recover System restored from validated backup; operations confirmed before device returned to service
Notify City leadership notified within 15 minutes of confirmed P1 security event; updates every 30 minutes
Report Post-incident report delivered within 5 business days — root cause, timeline, actions, prevention
CJIS Protocol For Public Safety-adjacent events: CJIS notification and documentation requirements followed immediately
12g. Ransomware Response — Client History
[Provide honest, factual response: If no clients have experienced a ransomware attack in the last 12 months, state this clearly. If any have, describe the response — isolation, recovery timeline, communication, and remediation — without identifying the client.] Leonard Technology's ransomware prevention posture includes: endpoint protection with behavioral detection, email security to block malicious attachments, monthly phishing simulation training, patch compliance to eliminate known vulnerabilities, and a validated BDR solution tested annually.

Our layered approach is designed to prevent ransomware from executing — and to recover rapidly if prevention fails.
12h. Backup Validation Strategy
● All backup jobs monitored daily — failures trigger immediate alerts and remediation before the next scheduled backup window
● Monthly backup health review — job success rate, data volume, retention compliance, and storage capacity
● Annual full restore test — a complete system restore from backup to a non-production environment; results documented and delivered to the City within 10 business days ● Quarterly backup spot-check — random file and folder restore validation to confirm backup integrity
● Cloud backup integrity checks — hash verification to confirm backup data is uncorrupted Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 41 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary 12i. Third-Party Penetration Testing
N/A
12j. PCI Compliance Familiarity
Leonard Technology is familiar with PCI DSS (Payment Card Industry Data Security Standard) requirements as they apply to organizations that process, store, or transmit cardholder data. While the City of Livingston's primary compliance obligations relate to CJIS and public-sector data governance rather than PCI DSS, Leonard Technology's security practices — network segmentation, access control, patch management, audit logging, and endpoint protection — are aligned with PCI DSS principles and support a strong overall compliance posture. 12k. Cloud Solutions & Additional Technology Options
● Microsoft Azure cloud services — virtual machines, Azure Virtual Desktop, Azure Backup, Azure AD
● Microsoft 365 Business Premium — full productivity suite; Exchange Online; Teams; SharePoint; OneDrive
● Cloud-based Disaster Recovery — recovery-as-a-service options for critical City systems ● Cloud PC / Virtual Desktop Infrastructure — for remote and field staff access (applicable to Squad Car terminal environments)
● Secure Cloud Storage — geo-redundant cloud backup with encryption at rest and in transit ● SaaS Backup — protection for cloud-hosted data (M365, SharePoint, OneDrive) Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 42 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

INS INSURANCE REQUIREMENTS
Leonard Technology Inc. will maintain all required insurance coverage throughout the term of the agreement. Certificates of insurance and all required endorsements — naming the City of Livingston as additional insured — will be submitted upon Notice of Award per RFP requirements.

Insurance Type Coverage Level
Comprehensive Commercial
General Liability
$1,000,000 per occurrence / $2,000,000 aggregate — City of Livingston named as additional insured
Commercial Automobile
Liability
$1,000,000 per occurrence, combined single limit — all
owned, hired, non-owned, and employee non-ownership
vehicles — City named as additional insured
Workers' Compensation
Insurance
Statutory requirement of the State of California — all staff Employer's Liability Insurance As required by California statute All insurance policies will be written on companies authorized to do business in the State of California. Certificates will be submitted by Leonard Technology's authorized broker to:
[email protected] or City of Livingston, Risk Management Division, 1416 C Street, Livingston, CA 95334.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 43 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Closing Statement
Leonard Technology understands that the City of Livingston is seeking a stable, accountable, and security-focused technology partner capable of supporting essential municipal operations. Our service model is designed to reduce operational risk, maintain continuity of service, and provide responsive support through structured governance, defined accountability, and measurable service delivery commitments.

We are fully committed to meeting every requirement of this RFP — including CJIS compliance, 24/7/365 monitoring and help desk, fixed monthly pricing, and on-site support across all six City locations. We look forward to the opportunity to earn the City's trust and to serving the community of Livingston for years to come.

James Leonard
Director, Leonard Technology Inc.
(631) 836-9593 | [email protected]| www.leonardtechinc.com Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 44 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

APP APPENDICES
Appendix Contents
Appendix A Key Personnel Resumes — James Leonard, Senior DevOps Engineer, Mark Rushie
Appendix B Company & Staff Certifications
Appendix C Insurance Documentation (to be attached upon award) Appendix D Sample Services Agreement
Appendix E Reference Contact Details (Attachment B — full contact information) Appendix F Sample Monthly Report Template
Appendix G Incident Response Plan (summary)
Note: Resumes, certifications, and supporting documents referenced in the Appendices should be attached to the final PDF submission prior to sending to [email protected].

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 45 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

APPENDIX A

KEY PERSONNEL RESUMES
The following personnel are proposed to support the City of Livingston engagement and provide executive oversight, infrastructure support, cybersecurity guidance, and day-to-day operational support.

1. James Leonard - Director | Executive Account Director Proposed Role for City of Livingston:

Executive oversight, client relationship management, escalation authority, service accountability, and strategic guidance.

Responsibilities:
• Executive engagement oversight
• Contract performance accountability
• Critical issue escalation management
• Quarterly business reviews and strategic planning
• Client communication and governance oversight
Relevant Experience:
• 12+ years supporting managed IT environments
• Public-sector and institutional support experience
• Multi-site operational environments
• Managed services leadership and governance oversight
Key Skills:
• Managed Services Leadership
• Service Delivery Governance
• Executive Client Management
• Technology Strategy & Planning
• Escalation Management

2. Senior DevOps / Cloud Engineer
Proposed Role for City of Livingston:

Cloud administration, Microsoft environment support, advanced infrastructure management, and security support.

Responsibilities:
• Microsoft 365 administration
• Azure and cloud systems administration
• Identity and access management
• Virtualization support
• Infrastructure troubleshooting
Certifications:
• AZ-400 — Microsoft DevOps Engineer Expert
• AZ-104 — Azure Administrator Associate
• SC-900 — Microsoft Security Fundamentals
• Google Cybersecurity Professional Certificate
Key Skills:
• Azure Administration
• Microsoft 365
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 46 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary • Virtualization
• Security Administration
• Automation & Infrastructure Management

3. Mark Rushie -Senior Infrastructure & Systems Engineer Proposed Role for City of Livingston:

Infrastructure administration, network support, endpoint management, and escalation support.

Responsibilities:
• Server administration
• Network systems support
• Endpoint management
• Infrastructure troubleshooting
• Technical escalation support
Certifications:
• AWS Cloud Practitioner
• CompTIA Network+
• CompTIA A+
• Google Cybersecurity Professional Certificate
Key Skills:
• Windows Administration
• Network Support
• Active Directory
• Infrastructure Management
• Technical Troubleshooting
Evaluator Note:

The proposed team structure combines executive oversight, senior engineering capability, cybersecurity awareness, and operational support resources to provide the City of Livingston with direct accountability and uninterrupted service delivery.

APPENDIX B

COMPANY & STAFF CERTIFICATIONS
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 47 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary The following certifications, technical credentials, and professional training support Leonard Technology's ability to provide managed IT services, infrastructure administration, cybersecurity oversight, cloud administration, and municipal support services for the City of Livingston.

B1. Company Technical Capability Areas
Capability Area Technology Coverage
Microsoft Systems
Administration
Microsoft 365, Exchange Online, Azure AD, Teams,
SharePoint
Cloud Infrastructure Microsoft Azure, cloud backup solutions, cloud administration
Endpoint Security Endpoint detection & response (EDR), antivirus, security monitoring
Infrastructure Support Windows servers, Active Directory, virtualization, networking
Backup & Disaster Recovery Veeam, cloud backup platforms, recovery procedures Service Management Help desk systems, ticketing, reporting, escalation workflows
Network Administration Firewalls, routers, switches, wireless infrastructure B2. Staff Certifications & Credentials
Staff Member Certification / Credential Relevance to City of Livingston Senior DevOps /
Cloud Engineer
Microsoft AZ-400 — DevOps
Engineer Expert
Cloud administration and Microsoft
environment support
Senior DevOps /
Cloud Engineer
Microsoft AZ-104 — Azure
Administrator Associate
Microsoft cloud administration and
identity management
Senior DevOps /
Cloud Engineer
Microsoft SC-900 — Security
Fundamentals
Security administration and
compliance awareness
Mark Rushie AWS Certified Cloud Practitioner Cloud infrastructure support Mark Rushie CompTIA Network+ Network administration and troubleshooting
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 48 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Mark Rushie CompTIA A+ Endpoint support and technical
troubleshooting
Technical Team Google Cybersecurity
Professional Certificate
Cybersecurity awareness and
security operations
Assigned
Personnel
CJIS Security Awareness
Training (as required)
Public Safety system access
support
B3. Municipal Relevance Summary
The certifications and technical training maintained by Leonard Technology personnel support the specific technology requirements identified by the City of Livingston, including:
• Microsoft environment administration
• VMware/Hyper-V and infrastructure support
• Security monitoring and incident response
• Help desk and end-user support
• Public Safety support awareness and CJIS requirements • Backup and disaster recovery operations
• Cloud administration and identity management
Evaluator Note:

Leonard Technology maintains an ongoing training and professional development approach to ensure personnel remain current with evolving technology platforms, security practices, and support methodologies.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 49 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary Appendix C —
Insurance Compliance Statement & Certificate of Insurance (Upon Award) Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 50 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

APPENDIX D

SAMPLE SERVICES AGREEMENT
Leonard Technology provides managed services under a structured agreement designed to establish clear service expectations, accountability, service levels, and operational responsibilities.

D1. Included Service Scope
• Managed IT services
• 24×7 monitoring and response
• Help desk services
• Microsoft systems administration
• Infrastructure and network management
• Endpoint security management
• Backup and disaster recovery support
• Asset and license tracking
• Vendor coordination
• Strategic technology planning
D2. Service Levels
Service Priority Response Commitment
Priority 1 – Critical System Outage Within 15 Minutes
Priority 2 – Significant Service
Impact
Within 1 Hour
Priority 3 – Standard User Issue Within 4 Business
Hours
Priority 4 – Routine Request Next Business Day
D3. Leonard Technology Responsibilities
• Continuous system monitoring
• Incident ownership and escalation
• Security monitoring and patching
• System documentation maintenance
• User support and issue resolution
• Monthly reporting and strategic guidance
D4. Client Responsibilities
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 51 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary • Maintain designated points of contact
• Provide system access as required
• Notify of environment changes
• Maintain software licensing compliance
Final contract terms will be negotiated and aligned with City of Livingston contractual requirements.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 52 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

APPENDIX E

REFERENCE DETAILS
Client Primary Contact Title Services Provided Relationship New York Public
Library
Technology
Services
Department
Information
Technology
Management
Managed IT Services,
Infrastructure
Administration, Help
Desk, Monitoring
Long-term
Active
Engagement
New York Law
Firm
Information
Technology
Administration
Operations
Management
Infrastructure Support,
Security Administration,
User Support
Active
Engagement
Palm Beach
County Housing
Authority
Information
Technology
Department
Technology
Services
Management
Microsoft Administration,
Endpoint Support, Cloud
Services
Active
Engagement
Evaluator Note:

The references above represent organizations requiring operational continuity, infrastructure support, user support, security oversight, and structured service delivery models comparable to the City of Livingston environment.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 53 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

APPENDIX F

SAMPLE MONTHLY REPORT TEMPLATE

MONTHLY MANAGED SERVICES REPORT
Client: City of Livingston
Reporting Period: Monthly
F1. Service Metrics
Metric Monthly Result
Total Tickets Received 147
Total Tickets Closed 142
Average Response Time 28 Minutes
Critical Incidents 2
Escalated Incidents 7
On-Site Support Visits 4
First Contact Resolution Rate 78%
F2. Infrastructure Health Summary
Service Area Status
Servers Operational
Network Infrastructure Operational
Backup Systems Successful
Endpoint Systems Operational
Patch Compliance 98%
F3. Security Summary
• 12 security alerts identified and remediated
• 100% endpoint protection active
• No confirmed security breaches
• Monthly vulnerability review completed
F4. Strategic Recommendations
• Replace aging endpoint devices approaching end of lifecycle • Expand MFA coverage to additional users
• Review backup retention policies
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 54 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary

APPENDIX GINCIDENT RESPONSE PLAN SUMMARY
Leonard Technology follows a structured incident response process intended to minimize operational disruption and maintain continuity of City services.

Phase 1 — Identification
• Monitoring alerts received
• User incident reporting initiated
• Security event identified
Phase 2 — Classification
Severity Definition
Critical Complete outage, security compromise, Public Safety impact
High Significant operational disruption
Medium Partial service degradation
Standard Routine issue
Phase 3 — Containment
• Isolate affected systems
• Restrict unauthorized access
• Preserve operational integrity
Phase 4 — Remediation
• Root cause analysis performed
• Corrective actions implemented
• Systems validated and tested
Phase 5 — Recovery
• Restore systems and services
• Validate system functionality
• Return systems to production operations
Phase 6 — Post-Incident Review
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 55 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary • Incident documentation completed
• Lessons learned documented
• Preventive recommendations issued

APPENDIX H

SAMPLE NETWORK DOCUMENTATION & ASSET TRACKING
H1. Network Documentation Elements
• Network topology diagrams
• Device inventory documentation
• Server inventory records
• Firewall configuration documentation
• IP address management records
• Wireless infrastructure documentation
H2. Asset Tracking Example
Asset Type Quantity Management Status Warranty Status
Desktop Systems 105 Centrally Managed Active
Servers 5 Centrally Managed Active
Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 56 LEONARD TECHNOLOGY INC. | City of Livingston IT Services Proposal Confidential & Proprietary iPads 10 Centrally Managed Active
Smartphones 20 Centrally Managed Active
Network Devices 15 Centrally Managed Active
H3. License Tracking Categories
• Microsoft licensing management
• Security licensing management
• Backup licensing management
• Productivity software licensing
• Warranty lifecycle tracking
Evaluator Note:

Centralized documentation and asset visibility improve operational continuity, simplify troubleshooting, and support proactive lifecycle planning.

Leonard Technology Inc. | (631) 836-9593 | [email protected] | www.leonardtechinc.comPage 57