Loma Linda City Council
June 14, 2022

Loma Linda Municipal Code to include mandatory residential organic waste recycling as required by Senate Bill 1383 [Public Works]
City Manager Thaipejr explained that the draft ordinance was not completed and requested the item to be continued.

The public hearing was open and closed with no public participation.

By consensus, the item was continued to the meeting of May 24, 2022.

CC-2022-39 – Consent Calendar
Motion by Rigsby and seconded by Lenart to approve the Consent Calendar items as presented;
Councilman Jindal pulled Agenda Items No. 7 and 11 for questions. In regards to Item No. 7, he inquired to the type of information that would be provided with the app. Chief Hacker explained that the App would provide the community fire information in a disaster or emergency situation as well as provide community outreach. He noted that the department applied for a grant that would cover the cost of the App for the first 3 years. Following the 3 years, the City would pay the annual maintenance fee. They anticipate the App would be available at the first part of the new fiscal year.

In regards to Item No. 11, Councilman Jindal noted that he was aware that there are city owned and So Cal Edison owned street light poles in Loma Linda. He asked if the City and Edison were using energy efficient lights. City Manager Thaipejr explained that concrete light poles in the City are City owned poles and the wooden poles are Edison owned. He confirmed that the City is using and updating to energy efficient lights. He noted that So Cal Edison is in the process of changing to energy efficient lights.

During a conference he attended, he was informed of an energy efficient program by So Cal Edison known as Option E, which, over time, lowers rates and, with adequate lighting, reduce crime. He asked if the City is taking advantage of the program. City Manager is aware of the program and reiterated that So Cal Edison is updating to energy efficient lighting. He also pointed out that the City will look to install solar panels at City owned street lights.

The City Clerk called roll and motion carried unanimously.

The demands register dated:
 April 26, 2022, with commercial demands totaling $2,257,188.43 and payroll demands dated April 14, 2022, totaling $347,908.35
 May 10, 2022, with commercial demands totaling $830,390.33 and payroll demands dated April 28, 2022, totaling $328,842.39
Approved the minutes of April 12, 2022, as submitted
Accepted the April, 2022, Treasurer’s Report for filing Accepted the April, 2022, Fire Department’s Report for filing Awarded the contract to OCV, LLC, for custom government Fire Department App to provide public information and education in the amount of $16,800.00; “Fire Department App” marketing and media kit, $1,995.00; Printing and Publishing, $1,000.00
City Council Minutes
May 10, 2022

Appropriated $47,000 from Water Utility Operations Fund Balance into Account No. 4657010-51300, and Awarded the Contract for Mountain View Well No. 3 Rehabilitation to Legend Pump & Well Services, Inc. in an amount of $42,635.00
Adopted Council Bill #R-2022-15 to approve the budget for Fiscal Year 2022-2023 for the Road, Repair, and Accountability Act of 2017 (SB1) and Repeal Resolution No. 3104 RESOLUTION NO. 3136
RESOLUTION APPROVING THE 2022-23 BUDGET TO INCORPORATE A LIST OF PROJECTS FUNDED BY SB 1: THE ROAD REPAIR AND
ACCOUNTABILITY ACT AND REPEALING RESOLUTION NO. 3104
Adopted Council Bill #R-2022-16 to order the preparation of the Annual Report for the Landscape Maintenance District No. 1 Annual Report for Fiscal Year 2022-2023 RESOLUTION NO. 3137

A RESOLUTION OF THE CITY COUNCIL OF THE CITY OF LOMA LINDA,

COUNTY OF SAN BERNARDINO, CALIFORNIA, INITIATING PROCEEDINGS

AND ORDERING THE PREPARATION OF AN ENGINEER'S REPORT FOR LANDSCAPE MAINTENANCE DISTRICT NO. 1 FOR FISCAL YEAR 2022/2023 Adopted Council Bill #R-2022-17 to approve the preliminary Annual Report for the Landscape Maintenance District No. 1 Annual Report for Fiscal Year 2022-2023 RESOLUTION NO. 3138

A RESOLUTION OF THE CITY COUNCIL OF THE CITY OF LOMA LINDA,

COUNTY OF SAN BERNARDINO, PRELIMINARILY APPROVING
ENGINEER'S REPORT FOR FISCAL YEAR 2022/2023 FOR LANDSCAPE MAINTENANCE DISTRICT NO. 1
Adopted Council Bill #R-2022-18 to set the public hearing for June 14, 2022, for the Landscape Maintenance District No. 1 Annual Report for Fiscal Year 2022-2023 RESOLUTION NO. 3139

A RESOLUTION OF THE CITY COUNCIL OF THE CITY OF LOMA LINDA,

COUNTY OF SAN BERNARDINO, CALIFORNIA DECLARING ITS INTENTION TO LEVY AND COLLECT ASSESSMENTS FOR FISCAL YEAR 2022/2023 IN LANDSCAPE MAINTENANCE DISTRICT NO. 1, AN ASSESSMENT DISTRICT;

DECLARING THE WORK TO BE OF MORE SPECIAL THAN GENERAL
PUBLIC BENEFIT; SPECIFYING THE EXTERIOR BOUNDARIES OF THE AREAS WITHIN LANDSCAPE MAINTENANCE DISTRICT NO. 1 TO BE ASSESSED THE COST AND EXPENSE THEREOF; DESIGNATING SAID DISTRICT AS LANDSCAPE MAINTENANCE DISTRICT NO. 1, DETERMINING

THAT THESE PROCEEDINGS SHALL BE TAKEN PURSUANT TO THE
LANDSCAPING AND LIGHTING ACT OF 1972; AND OFFERING A TIME AND

PLACE FOR THE PUBLIC HEARING
Adopted Council Bill #R-2022-19 to order the preparation of the Annual Report for the Street Light Benefit Assessment District Annual Report for Fiscal Year 2022-2023 City Council Minutes
May 10, 2022

RESOLUTION NO. 3140

A RESOLUTION OF THE CITY COUNCIL OF THE CITY OF LOMA LINDA,

COUNTY OF SAN BERNARDINO, STATE OF CALIFORNIA, INITIATING

PROCEEDINGS AND ORDERING THE PREPARATION OF AN ENGINEER'S REPORT FOR STREET LIGHT BENEFIT ASSESSMENT DISTRICT NO. 1 FOR FISCAL YEAR 2022/2023
Adopted Council Bill #R-2022-20 to approve the preliminarily Annual Report for the Street Light Benefit Assessment District Annual Report for Fiscal Year 2022-2023 RESOLUTION NO. 3141

A RESOLUTION OF THE CITY COUNCIL OF THE CITY OF LOMA LINDA,

COUNTY OF SAN BERNARDINO, STATE OF CALIFORNIA, PRELIMINARILY APPROVING ENGINEER'S REPORT FOR FISCAL YEAR 2022/2023 FOR STREET LIGHT BENEFIT ASSESSMENT DISTRICT NO. 1
Adopted Council Bill #R-2022-21 to set the public hearing for June 14, 2022, for the Street Light Benefit Assessment District Annual Report for Fiscal Year 2022-2023 RESOLUTION NO. 3142

A RESOLUTION OF THE CITY COUNCIL OF THE CITY OF LOMA LINDA,

COUNTY OF SAN BERNARDINO, CALIFORNIA DECLARING ITS INTENTION TO LEVY AND COLLECT ASSESSMENTS FOR FISCAL YEAR 2022/2023 IN STREET LIGHT BENEFIT ASSESSMENT DISTRICT NO. 1, AN
ASSESSMENT DISTRICT; DECLARING THE WORK TO BE OF MORE
SPECIAL THAN GENERAL PUBLIC BENEFIT; SPECIFYING THE

EXTERIOR BOUNDARIES OF THE AREAS WITHIN STREET LIGHT
BENEFIT ASSESSMENT DISTRICT NO. 1 AND TO BE ASSESSED THE COST AND EXPENSE THEREOF; DESIGNATING SAID DISTRICT AS
STREET LIGHT BENEFIT ASSESSMENT DISTRICT NO. 1,

DETERMINING THAT THESE PROCEEDINGS SHALL BE TAKEN
PURSUANT TO THE LANDSCAPING AND LIGHTING ACT OF 1972;

AND OFFERING A TIME AND PLACE FOR HEARING OBJECTIONS

THERETO
Accepted as complete and authorized recordation of Notice of Completion for Waterline and Pavement Rehabilitation on various streets including Curtis, Lomas Verdes and Mead Streets (CIP 21-102) in the amount of $1,669,913.72 to MCC Equipment Rentals, Inc., Contractor Approved supplemental appropriation of $13,700 from Capital Facilities Fund Balance and $92,000 from Water Enterprise Fund Balance to cover expenses for the remainder of the 2022-23 Fiscal Year Old Business – No reports.

New Business
CC-2022-40 - Council Bill #R-2022-22 - Adopting the Measure I Five-Year Capital Improvement Plan City Manager presented the report into evidence, identifying all the streets that are part of the Measure I Five-Year Improvement Plan.

City Council Minutes
May 10, 2022

Motion by Rigsby and seconded by Dailey to adopt Council Bill #R-2022-22 to approve the Measure I Five-Year Capital Improvement Plan as submitted; the City Clerk called roll and motion carried unanimously.

RESOLUTION NO. 3143

RESOLUTION OF THE CITY COUNCIL OF THE CITY OF LOMA LINDA, STATE

OF CALIFORNIA, ADOPTING THE MEASURE I FIVE-YEAR CAPITAL IMPROVEMENT PLAN FOR FY2022/2023 THROUGH FY 2026/2027
Reports of Councilmen
Councilman Lenart asked if the City is mandating any water restrictions in the City. City Manager Thaipejr explained that the City constantly encourages residents to conserve; however, the City is not enforcing any mandates at the present time due to the fact that the City has sufficient water in reserves.

Councilman Jindal inquired about the Housing Element deadline to the State. City Manager Thaipejr explained that the City submitted its Housing Element report by the scheduled deadline; however, discussions regarding the report between the City and State are ongoing. Discussion ensued pertaining to International Council of Shopping Center (ICSC) in Area D.

Councilman Jindal attended the SCAG Conference and noted cities received recognition on sustainability projects. City Manager Thaipejr stated that the City has received recognition on various projects. He stated that he had not recently submitted applications on City projects for recognition.

Reports Of Officers
No reports.

The meeting adjourned at 7:50 p.m.

Approved at the meeting of June 14, 2022.

City Clerk
City of Loma Linda
Official Report
Phill Dupper, Mayor
Ronald Dailey, Mayor pro tempore
Rhodes Rigsby, Councilman
John Lenart, Councilman
Bhavin Jindal, Councilman
CITY COUNCIL AGENDA: June 14, 2022
TO: City Council
FROM: Sonia Fabela, Finance Director/City Treasurer
VIA: T. Jarb Thaipejr, City Manager
SUBJECT: May 2022 Treasurer’s Report

RECOMMENDATION
It is recommended that the City Council receive the report for filing.

Approved/Continued/Denied
By City Council
Date _________________
CC AGENDA ITEM 7

DEMAND DEPOSIT ACCOUNTS

CITY - BANK OF AMERICA - MAIN CHECKING ACCOUNT 4,963,195.23 $ Outstanding Checks as of month-end (3,136,438.18)
CITY - MAIN CHECKING ACCOUNT AVAILABLE BALANCE 1,826,757.05 $ BANK OF AMERICA - PAYROLL $ 7,161.04
HOUSING AUTHORITY - BANK OF AMERICA - CHECKING ACCOUNT 155,234.10 Outstanding Checks as of month-end -
HOUSING AUTHORITY - CHECKING ACCOUNT AVAILABLE BALANCE $ 155,234.10 SUCCESSOR AGENCY - BANK OF AMERICA - CHECKING ACCOUNT 2,410,661.72 Outstanding Checks as of month-end (5,180.00)
SUCCESSOR AGENCY - CHECKING ACCOUNT AVAILABLE BALANCE $ 2,405,481.72 DEMAND DEPOSIT ACCOUNTS - TOTAL $ 4,394,633.91
YIELD

LOCAL AGENCY INVESTMENT FUND (LAIF)
CITY 0.523% * 47,974,433.85 $
CITY - Former RDA Bond Proceeds 0.523% * 1,225,018.22
CITY -Total 49,199,452.07
SUCCESSOR RDA 0.523% * 1,503,931.66
HOUSING AUTHORITY 0.523% * 1,057,712.33
INVESTMENTS TOTALS $ 51,761,096.06

OTHER CASH

IMPREST ACCOUNT $ 500.00
CASH ON HAND 1,350.00
OTHER CASH TOTAL $ 1,850.00

CASH AND INVESTMENTS - GRAND TOTAL 56,157,579.97
PREVIOUS MONTH 54,614,014.18
.

CHANGE +/(-) $ 1,543,565.79
All investments are in accordance with the City Investment Policy, and as such, sufficient funds are available to meet the cash flow requirements of Loma Linda, including the next thirty days' obligations. City and Agency funds are pooled.

Treasurer
*Laif Yield rate listed is for the month of April 2022. The May 2022 yield rate was unavailable as of the report date.

May 2022

CITY OF LOMA LINDA

COMPOSITION OF CASH

INVESTMENTS
Type text here
Type text here
-
10,000,000.00
20,000,000.00
30,000,000.00
40,000,000.00
50,000,000.00
60,000,000.00
05/21 06/21 7/21 8/21 9/21 10/21 11/21 12/21 1/22 2/22 3/22 4/22 5/22

CITY OF LOMA LINDA
MONTHLY TREASURER'S REPORT 5/21-5/22

CITY, SUCCESSOR RDA & HA - TOTAL CASH AVAILABLE CITY- FORMER RDA BOND PROCEEDS BASELINE CC AGENDA ITEM 8

CC AGENDA ITEM 9a
Proposal for
City of Loma Linda Managed Security Service
Provider RFP
Providing Cybersecurity Services your organization needs in the age of digital everything Prepared for:

City of Loma Linda
C/O Kyle MacGavin
25541 Barton Rd.

Loma Linda, CA 92354
Prepared and Submitted by:

Mike Khalili
9871 Irvine Center Dr. suite 100
Irvine, CA 92612
Telephone: 949-503-6140
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 2
Table of Contents
Letter of Transmittal ........................................................................................................................................... 3 Techstrata Contact Information......................................................................................................................... 5 Executive Summary............................................................................................................................................ 6 TechStrata Manage Security Services............................................................................................................ 10 Virtual CISO (vCISO) Services......................................................................................................................... 10 Incident Management ....................................................................................................................................... 11 Problem Management....................................................................................................................................... 11 Service Level Agreement ................................................................................................................................. 11 Virtual CISO (vCISO) Services......................................................................................................................... 12 Real-Time Monitoring and SIEM (Security Information and Event Management)...................................... 12 Managed Detection and Response ................................................................................................................. 14 Vulnerability Analysis....................................................................................................................................... 16 Security Awareness (User based Training).................................................................................................... 17 Reporting ........................................................................................................................................................... 17 Key Benefits of TechStrata Care Support Services ...................................................................................... 24

1.0 Project Description ..................................................................................................................................... 25

2.1 City of Loma Linda Requirements ............................................................................................................ 25

3.0 Statements: ................................................................................................................................................. 31

3.1 Bidder Guarantees...................................................................................................................................... 32

3.2 Bidder Warrantees ...................................................................................................................................... 32

3.3 Right of Rejection ....................................................................................................................................... 32

3.4 Insurance Requirements............................................................................................................................ 32

4.0 Vendor Preference and Information.......................................................................................................... 33

4.1 Local Vendor Preference............................................................................................................................ 33

4.3 Organization and Bidder Questionnaire................................................................................................... 34

4.4 Bidder Background Questionnaire ........................................................................................................... 34

4.5 Litigation...................................................................................................................................................... 35 Appendix A- Techstrata Managed Services pricing for City of Loma Linda .............................................. 36 Appendix B- Techstrata Insurance Accord.................................................................................................... 37 Appendix C- Techstrata Cybersecurity Structure/Chart............................................................................... 38 Appendix D - Techstrata Managed Security Service Contact Center.......................................................... 39 City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 3
Letter of Transmittal
Kyle MacGavin 06/02/2022
City of Loma Linda
25541 Barton Rd.

Loma Linda, CA 92354
Phone: (909)799-4411
E-mail: [email protected]
RE: City of Loma Linda Managed Security Service Provider RFP Dear Mr. MacGavin:

Techstrata LLC. is pleased to submit its proposal for City of Loma Linda Managed Security Service Provider RFP Request. Techstrata is proud of its partnership with City of Loma Linda and our continued support and services to City of Loma Linda for the last decade. This rich experience has allowed us to fully understand and appreciate the City of Loma Linda requirements under this RFP from both the information security technologies and City’s staff and end-user perspectives and services requirements.

Techstrata has successfully demonstrated that it is a trusted and reliable Managed Security Service Provider and partner to City of Loma Linda. We are tremendously proud of the impacts that we have made in helping City of Loma Linda and other State and Local government customers serve, protect, and improve the lives of its citizens and communities. Techstrata has provided its manage security services offering to many other state and local government entities and all of their users (local governments, schools, etc.). • Proven ability: we have been performing the City’s Managed Network Services and engineering support for the past several years.
• Effective On-Boarding: Techstrata has on-boarded many clients for Managed Security and Networking Services; this will be crucial as we provide Managed Security services for City’s Information Technology services, Servers, Appliances, end points and end users. • Security: Techstrata’s vCISOs, who have the many security qualifications, and many years of Information Security experience and protecting customers from assorted attacks, will be at the service of the city. • 360 degree view your organization cybersecurity ecosystem: Our Managed Security services offering combine deep domain and industry expertise with a future-focused approach that encompasses advisory, transformation and cybersecurity protection services. We offer the foresight and expertise to solve your most complex cybersecurity challenges.
• 24x7 Cybersecurity monitoring to provide ongoing Monitoring and Security Managed Services:

Techstrata’s dedicated Cybersecurity analysts and security engineers will be available to answer questions by phone call, email 24x7 to respond to City of Loma Linda Information Security needs, incidents that require immediate response. Escalations are made rapidly to higher level engineers so that incidents are addressed, responded, and systems are returned to back to operation and end users receive rapid, efficient response to their needs.
• Pricing: We believe our pricing to be fair. We may not be the least expensive, but the City understands that dollar cost is only one component of the overall Managed Information Security services experience.

The other major components mentioned above and within this document will demonstrate that overall, we believe that choosing Techstrata will be the best return on investment.

In the following section, we highlight Techstrata Managed Security Services unique capabilities to help City of Loma Linda protect its valuable information systems and assets in accordance with the requirements and conditions defined by the RFP:

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 4
Techstrata will provide a team that includes the following:
• One (1) vCSO
• One (1) Account Manager
• One (1) Technical Project Manager
• Techstrata SOC Security Analyst team
Our team is prepared to fully support the City of Loma Linda Managed Security Services requirements, needs and support requirements. Techstrata will not only provide a level of service that will meet your current expectations but will assist in suggesting and implementing the required changes in case of vulnerabilities and potential threats that will benefit the City. Located in Irvine, California our Security Monitoring center and Network Operations Center and Remote Help Desk afford us the capability to meet your expectation and SLA requirements.

On behalf of Techstrata, thank you for giving us the opportunity to respond to this RFP and we look forward to continuing a mutually rewarding partnership.

Sincerely,
_______________________ _______________________
Mike Khalili Darrell Clark
Account Manager Director of Security Operation Center
Office:949.503.6140 Office:949.503.6143
Cell: 949.742.4565 Mobile: (949) 353-9125
Fax: 949.503.6144 Fax: 949.503.6144
Email: [email protected] Email: [email protected] www.techstrata.com www.techstrata.com
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 5
Techstrata Contact Information
Dedicated City of Loma Linda key personnel:

Techstrata Account Manager
Mike Khalili
Office: (949) 503-6141
Mobile: (949) 742-4565
Email: [email protected]
Director of Managed Security Services
Darrell Clark
Office: (949) 503-6143
Mobile: (949) 353-9125
Email: [email protected]
Chief Information Security Officer
Omid Rajaee
Office: (949) 503-6142
Email: [email protected]
Techstrata Sales Director
Michael Lerner
Office: (949) 359-7402
Mobile: (714) 684-6589
Email: [email protected]
TechStrata office locations:

Irvine
19800 MacArthur Blvd. Suite 300
Irvine, CA 92612
9871 Irvine Center Drive, Suite 100,
Irvine, CA 92618
Tustin
13891 Newport Avenue, Suite 130
Tustin, CA 92780
San Jose
333 W. Santa Clara street suite 920
San Jose, CA 95113
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 6
Executive Summary
Techstrata Overview
We are the regional leaders in Cybersecurity, IT Solutions and Managed Services. We are dynamic, diversely talented, customer-centric, laser focused, and our mission is to defend and protect our clients from cyber adversaries through advisory, consulting, managed security services, engineering, design implementations and operational services which are based on our core values of innovation, quality, reliability, and integrity.

TechStrata has as a long tradition of Cybersecurity and IT solutions leadership and innovation. The company continues to expand its product line and services to meet emerging customer needs. Its broad range of capabilities includes Information Security Services and practices, IT Compliance, operational efficiencies, and Information security readiness by leveraging best practices in IT infrastructure, Application modernization, and Security-minded designs and practices.

TechStrata is organized into three business units: Managed Security Service Provider, Cybersecurity solutions, IT Solutions, and Managed Services. In addition, functional organizations working across the company focus on engineering and program management, technology and development, program execution, advanced design systems, quality, system reliability, process and productivity improvement and information technology.

Managed Security Service Provider
Services are delivered via Techstrata supported 24/7 Security Operation Center and our Security Analysts. Techstrata MSSP (Managed Security Service Provider) offerings focused on security event monitoring and response are Complete Security Monitoring (CSM) and Managed Detection and Response (MDR*). Additional services include Vulnerability Management (positioned for Public and enterprise customers) and Vulnerability Scanning Service (positioned to small and midsize business [SMB] customers), Incident Response, and Threat Intelligence.

In addition to security event monitoring and response services, Techstrata also offers incident response (both remote, leveraging CrowdStrike, SentinelOne among other EDR vendors, and onpremises, as required), as well as vulnerability assessment and vulnerability management services.

Techstrata offers SLAs that are in line with market norms. The tiered service model, which is incremental, offers a low-cost Basic tier, as well as the Standard and Premium service tiers with service options and “bolt on” advanced packages to suit specific customer requirements.

With over 2 decades providing security Services, consulting and operations services to Public and top-tier enterprise customers, Techstrata covers the spectrum of Managed Security Services as a regional MSSP.

From monitoring & investigation to optimization & customizations of tools, to remediation & incident response, our security analysts, engineers, and developers cover the bases. Techstrata offers the following Security services to it's clients in public and private sectors:

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 7
Security as a Service (SaaS)
Techstrata Managed Security Monitoring Service is a scalable, next generation managed Security service solution that provides actionable, business-oriented workflows to help you through mitigating the most critical threats to keep your business safe.

Managed EDR (MDR)
Techstrata Managed EDR, or MDR, capitalizes on next generation endpoint protection technology by allowing our team of analysts, threat hunters, and operations experts to optimize and tune your EDR for maximum effectiveness and efficiency.

Data Security
Our portfolio of trusted and scalable professional and managed data security services helps clients protect their critical data from cradle to grave in a cost-effective and compliant way with flexible, scalable and highly adaptable cybersecurity services.

Vulnerability Management
With Techstrata Vulnerability Management services, you can test for and manage vulnerabilities across your network, systems and applications—helping you mitigate risk and improve resilience.

Address today’s challenges and prepare for the future by identifying existing and emerging threats and vulnerabilities that could disrupt your journey.

Managed Firewall, IDS, IPS, VPN, SD-WAN
Firewalls are the first line of perimeter defense and require steadfast maintenance and operation to achieve 100% uptime. Configuration assistance, patching, monitoring, capacity planning — we've got it covered.

Penetration Testing
Our hyper focused penetration testing team will emulate bad actors to find vulnerabilities in assets and evaluate how badly they can be abused toward the goal of malicious access.

The end result is a clear understanding of customer security posture and focal points for improvement.

Security Engineering Services
Techstrata offers full spectrum IT engineering and software development services to provide necessary advisory, design, and implementation where challenging integration is necessary to improve maturity.

Incident Response
Techstrata Incident Response Unit is prepared to assess, investigate, and contain in the event an incident, breach, or systemic threat occurs.

With dynamic and ever-changing business demands and requirements of information technology in the modern day, security related concerns, issues and challenges are more prevalent than before. Expanding digital age and economy face complex governance and compliance requirements. IT security risk is now a board-level concern, and meeting the minimum requirement is not enough. Techstrata Security’s Governance, Risk and Compliance services helps you assess current risks, verify adherence to standards (NIST-800), and implement technology and policies to help you maintain compliance.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 8
IT Solutions
One of the most important aspects of your business is its IT infrastructure. You can’t have an appropriate level of internal operational efficiency in today’s competitive marketplace without it, as the IT infrastructure is foundation and the backbone of any modern enterprise.

TechStrata assist you in the makeup of your IT infrastructure which consist of— hardware, software, human and network resources, and other services. Your IT infrastructure is everything you’ll need to run and manage your IT environment which typically is used by your employees, partners, and consumers. Your IT infrastructure is essential to the smooth operation of your company.

We will assess your existing IT environment and advise you on your IT infrastructure improvements and manage its many components as they become fully operational.

TechStrata R &D department core mission is to search for advancement in IT infrastructure innovation by connecting with industry wide leaders and designers to offer an optimum setup for your environment. We offer our IT infrastructure management services to small, medium and large enterprises.

IT and Network Managed Services
A Managed Service Provider (MSP) is an outsourced (fully managed or co-managed IT Service provider) contracted to provide onsite and remote Support Services to manage or deliver IT services such as network, application, infrastructure, or security management to clients by assuming full responsibility for those services, determining proactively what technologies and services are needed to fulfill the client’s needs. TechStrata is considered a leader in Managed IT Services. Techstrata’s managed IT services include, data center management, network management, mobility management, infrastructure management, backup and recovery management, communication management, and security management.

Techstrata Vision Statement
Simplistic in form yet profound in the message it delivers; our vision statement speaks to our single goal: "To transform business through the evolutionary power of technology" Our Technology Focus
We study our clients current-state technology and operations, then contrast it with where they want to go. Together we will quantify the right technology, quantify costs, risks, opportunities, governance and workflow.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 9
Experience
TechStrata’s extensive background in Cybersecurity, Cloud, IT Managed Services and OnPremises solutions enables our experts to take a holistic view of your current state and help define, build and execute on your future state getting you to the cloud with purpose and intention.

Expertise
We know “Our People make the Difference.” We invest heavily in hiring, training, and retaining top talent in our industry. Our longstanding experience in Cybersecurity, Managed Service and professional services coupled with excellence in cloud and information security provides the expertise you need to help minimize the risk of cyberthreats and cloud security.

Execution
Our top priority is to ensure a long-term successful relationship with our customers and to become their trusted advisor. We solve crucial IT challenges by delivering the right technology, deployed on the right premises, and managed through the right service model to fit your unique technical and business challenges.

TechStrata Business History
The current Techstrata leadership team began our company’s long tradition of Cybersecurity and IT solutions leadership and innovation in 2003. The company continues to expand its product line and services to meet emerging customer needs. Its broad range of capabilities includes Information Security Services and practices, IT Compliance, operational efficiencies, and Information security readiness by leveraging best practices in IT infrastructure, Application modernization, and Security-minded designs and practices.

Despite our evolution over the years, Techstrata continues to be guided by our values. We hire and promote employees based upon the best exemplification of these values, and it has become the basis for how we serve our clients and each other.
• Do the right thing
• Achieve more together
• Challenge the status quo
• Take the lead
• Strive for excellence
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 10
TechStrata Manage Security Services
Techstrata leverages a combination of industry leading technologies and proprietary software and processes to detect targeted attacks at the perimeter, endpoints, and cloud. Our Managed Security Services provide City of Loma Linda enhanced visibility and access to logs of security events so we can detect and discover active threats, such as ransomware pre-cursor activities.

Techstrata Managed Security Service provides the following services and benefits to its clients:
• Proven ability: we have been performing the City’s Managed Network Services and support for the past several years.
• Effective On-Boarding: Techstrata has on-boarded hundreds of clients for Managed Security Services; this will be crucial as we provide Security Managed services for City’s Information Technology services, Servers, end points and end users.
• Security: Techstrata’s vCISO, who has the many security qualifications, and many years of Information Security experience and protecting his customers from assorted attacks, will be at the service of the city.
• 24x7 SOC to provide ongoing Monitoring and Security Managed Services: Techstrata’s dedicated security analysts and experts will provide ongoing monitoring and will alert clients the email or phone call during the requisite time frame and SLA. Escalations are made rapidly to higher level engineers so that end users receive rapid, efficient response to their questions. • Within this document, we have matched up what we believe the City’s project needs to be with many examples of Techstrata performing very similar tasks.

Techstrata will provide a team that includes the following:
•One (1) vCSO
•One (1) Account Manager
•One (1) Project Technical Manager
•Techstrata SOC Security Analyst team
Virtual CISO (vCISO) Services
TechStrata will assign a Top-Tier Security Expert to the City to work with the City of Loma Linda IT team to build and improve information security programs. Starting with a risk assessment, a vCISO first gets an understanding of the strengths and weaknesses of an organization's security program and shows measurable improvement to security posture. We start by going through an onboarding assessment to get an understanding of the maturity of your program. With that, we can provide initial remediation recommendations to address glaring concerns and prepare The City for a more extensive risk assessment.

Ultimately, your vCISO engages in a constant cycle of assessing and remediating, Incident response that allowing you to meet your security goals.

Our Cybersecurity analysts and experts will provide complete and proactive services to ensure City of Loma Linda IT services are highly available and respond to end users in timely manner.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 11
Incident Management
Techstrata Security Managed Services experts will serve City of Loma Linda with an Industry’s recognized ITIL based framework Helpdesk and ticketing system to provide ongoing Managed Security Services to City of Loma Linda staff, end users and community members.

Techstrata’s Service Desk operations are delivered through a consistent set of tools and processes providing efficient and cost effective IT Services to the City. An Incident is any event which causes, or may cause, an interruption, risk or potential threat that my impact the quality of the service to your users and staff. TechStrata security experts and analysts highest priority is to respond, remediate and restore normal operations as quickly as possible with the least possible impact on your business or users.

Problem Management
Techstrata Support engineers will utilize our problem management system to help reduce adverse impacts caused by incidents and avoid the recurrence of problems related to these incidents.

Our team will investigate and determine the root cause of the problems and investigate for analysis and elimination. Our Problem management systems and event correlation provide clients with faster problem resolution in managing multiple incidents revolving around a single problem easily.

Service Level Agreement
Techstrata Account Management and Support engineers goal is to exceed our clients expectations and achieve higher levels of customer satisfaction by providing quality and timely services adhering to the agreed upon Service Level Agreements (SLAs). When iterative investigation and diagnosis has determined the nature of the incident and the actions that need to be initiated to resolve the error, incidents are escalated to Problem Management to detect the underlying cause of the problem, provide resolutions and prevent incidents from reoccurring.

Our Service Desk’s objective, with these Incident Management processes, is to return your IT services to a normal service level as quickly as possible and with minimum disruption to your business. These levels are defined in your Service Level Agreement (SLA).

Project and Strategic Initiatives
A significant advantage of a Projects deployment is the minimal downtime required for system cutover and the ability to conduct pre-cutover configuration testing on most system components.

The New System will often be installed and cutover by in phases and segments allowing for minimal disruption of infrastructure and application services. Techstrata will work with City of Loma Linda IT management and stakeholders to identify, plan and implement strategic initiatives that are planned for each calendar year/quarter.

Techstrata Account Management and Executive team are dedicated to City of Loma Linda and Customer Satisfaction
Techstrata account and Project Manager will play an active role in supporting City of Loma Linda Managed Security Service provider operation and management. Our account and Project manager involvement provides accountable management overseeing the City of Loma Linda Security Management, monitoring, customer satisfaction and performance of Techstrata services and its engineering teams. Our entire team is dedicated to City of Loma Linda Staff success and satisfaction and will ensure to exceed all services requirements for City of Loma Linda.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 12
Techstrata has a rich history of support and services for many state, local government, and education clients. We are proud of supporting City of Loma Linda for the last several years.

Techstrata Manage Security Services
Virtual CISO (vCISO) Services
TechStrata will assign a Top-Tier Security Expert to the City to work with the City of Loma Linda IT team to build and improve information security programs. Starting with a risk assessment, a vCISO first gets an understanding of the strengths and weaknesses of an organization's security program and shows measurable improvement to security posture. We start by going through an onboarding assessment to get an understanding of the maturity of your program. With that, we can provide initial remediation recommendations to address glaring concerns and prepare The City for a more extensive risk assessment. Ultimately, your vCISO engages in a constant cycle of assessing and remediating, Incident response that allows you to meet security goals.

Real-Time Monitoring and SIEM (Security Information and Event Management) TechStrata Manage Security Service center and support team operate 24 hours a day, 7 days per week. Our security monitoring and analaysts can be reachable by telephone and e-mail.

TechStrata Managed Security Monitoring Service will provide authorized city of Loma Linda administration access to a web-based monitoring portal in order to obtain on-demand, real-time views of its monitored alerts and events.

Figure 1- Techstrata Managed Security Services at a glance City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 13
TechStrata Managed Security and Monitoring Services provide scalable, next-gen managed security services that provides actionable, business-oriented workflows to support you through mitigating the most critical threats. It is a detection and response solution designed to monitor active user accounts for anomalous user behavior, distinguishing an attacker from legitimate user activity. Our 24x7 Managed Security Monitoring Service works to monitor and notify you of potential threats and helps you to respond appropriately.

When TechStrata’s security analyst teams receive critical alerts, we take immediate action to notify, alert, remediate the potential cyber threats :

1. Notifies you: Via email or phone depending on the severity of the incident. The SOC service level objective (SLO) is for partners to receive notification of an alert within one hour of the incident appearing in the system.
• Email Notification: For any incident that is not in progress and does not appear to have immediate or critical ramifications. This includes events that could be indicators of a potentially critical security incident in the future.

2. Investigates: The SOC team immediately researches the threat to determine if it represents suspicious activity.

3. Mitigates: If the threat is determined to be malicious, the SOC will:
• Take immediate action that will not impact client operations to mitigate the damage.
• Contacts you for permission if actions that will impact client operations are required.

4. Provides Recommendations: Remediation steps and recommendations are provided to you to help remediate the threat.
• The SOC team will provide recommendations for remediation and assist with needed steps.

Figure 2- Techstrata Managed Security Service operation City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 14
TechStrata SOC team SLA (Service Level Agreement) to investigate criteria:

Low SLO response time = 4 hours from when the ticket is received Medium SLO response time = 4 hours from when the ticket is received High SLO response time = 2 hours from when the ticket is received Urgent SLO response time = 1 hour from when the ticket is received Managed Detection and Response
Figure 3 Techstrata Managed Security Detection and Response City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 15
Cloud Service Monitoring
The prevalence of cloud services has continued to grow, and Microsoft 365 and Azure have become central components for small businesses and large enterprises alike.

TechStrata SIEM solution can collect all Microsoft 365 data and logging from the Microsoft Security and Compliance Center and Graph API into our platform. This enables us to build on top of the existing security and alerting infrastructure in place by Microsoft.

SIEM platform would seamlessly integrate all the tools, products, services, and generally anything that creates an event or log into a single place. This eases the burden on analysts, improves response times for critical issues, and allows all the relevant data to handle a threat to exist in one place. Feeding Microsoft 365 logs into our SIEM offers additional benefits on top of the existing Microsoft Security and Compliance Center:
• Depth — Every single event, audit log, security log, and otherwise from Microsoft 365 are automatically parsed and can be searched, sorted, and filtered in powerful ways. • Full View — Microsoft 365 log records can be shown intertwined with other logs from host machines, network devices, and firewalls to see the “big picture” around an event.
• Visibility — Deep-dive through tricky logs yourself to solve events and false positives, without having to call a support team.
• Assistance — TechStrata’s security analysts and Microsoft experts are actively monitoring and reviewing what happens in your environment, responding to the issues identified by Microsoft, and hunting for threats that may have been missed.

Figure 4 - Techstrata Managed Security Cloud Security Monitoring Dashboard City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 16
Vulnerability Analysis
Vulnerability management is an ongoing process that includes proactive asset discovery, continuous monitoring, mitigation, remediation, and defense tactics to protect your organization's modern IT attack surface from Cyber Exposure.

TechStrata can help a fast, easy way to proactively find and fix vulnerabilities. Our vulnerability management and scanning tool automates point-in-time assessments to help quickly identify and fix vulnerabilities, including software flaws, missing patches, malware, and misconfigurations, across a variety of operating systems, devices, and applications.

Custom Security Rules
Techstrata Managed Security Monitoring System allow for the creation of custom, userdefined security rules based on the specific information security policies of to support City of Loma Linda Managed Security Service requirements. These rules ca be easily created, accessible for viewing, modification, and maintenance
Figure 5 - Techstrata Managed Security Service Custom Security Rule screen City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 17
Security Awareness (User based Training)
TechStrata can implement the largest integrated security awareness training and Simulated Phishing platform; including interactive modules, videos, games, posters, and newsletters.

Automated training campaigns with scheduled reminder emails to help City of Loma Linda’s IT department to educate Employees and Contractors and have a better management on the urgent IT security problems of social engineering, spear-phishing, and ransomware attacks and at the same time stay compliant with industry regulations.

Also with innovative Virtual Risk Officer functionality, TechStrata helps the city to identify risk at the user, group, and organizational level and to make data-driven decisions when it comes to the City’s security awareness plan.

Reporting
Techstrata can help and customize all reports for a specific date and time range upon the city’s IT team’s request. We will provide any pre-built visualized reports and add them to custom dashboards, or use email to send the reports:
• Top Threats
• Vulnerabilities
• PCI (Payment Card Industry) DSS v3.2.1 Compliance
• HIPAA Compliance
• Networking
• Windows Logs
• Monitored Assets
• Office 365
Remote Tools
Monitoring Tools leveraged by the Techstrata Security Monitoring System do not provide remote access to systems. Techstrata security analysts will not remotely access any client machine without your involvement.

When Remote Access is Required
For certain alerts, the Techstrata security analysts may submit a request to the NOC for an analyst to log in remotely and resolve an issue. If this should occur, the NOC technician will adhere to the site's designated NOC access level and any performed work is noted in the SOC ticket. For any desktop issues that require attention, the SOC team creates a ticket and assigns it to you.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 18
Incident Investigation and Response
The SOC will provide monitoring, detection, investigation, escalation and incident support for all incidents within the current supported toolset and visibility of the managed services.

The SOC is responsible for incident monitoring, detection, analysis, investigation, escalation, and incident support. The SOC will be responsible for remote incident analysis and investigation to determine if alerts or security events warrant incident classification. If an event is classified as an incident by the SOC, the SOC will track the incident with You. The SOC will perform incident triage to include determining threat scope, urgency, potential impact and make recommendations designed to allow for remediation.

The SOC will remotely investigate initial security events identified by the SOC and escalate as appropriate in accordance with the established and agreed upon Service Level Objectives (SLOs).

Events and incidents will be analyzed and investigated using the SOC’s standard process and procedures. Escalations will follow established escalation paths and utilize contact information collected during onboarding and documented by SOC.

For incidents that are assigned to the Client after analysis, the Client is responsible for escalating incidents back to the SOC that require action or analysis by the SOC.

The SOC will be the collection point for additional group inputs for classification of security incidents.

The potential exists for other entities to notify the SOC of possible events. In these relatively rare cases, the SOC will ensure outside sources of information are incorporated into established SOC workflow procedures. As events are pulled into the SOC Workflow, it is the SOC's responsibility to create and classify incidents. As the SOC is responsible for incident escalation and response, only the SOC has the authority to classify events or alerts as incidents to ensure due diligence of event investigation and accountability in reporting.

During incident investigation the SOC may perform the following activities:
• Perform analysis on client assets / traffic, document results noting attacker profiles. • Assist in identifying potential impact of incidents on client systems and using available Techstrata Managed Security Operation Analysts security tools to assist client in determining if data was exfiltrated.
• Document and track events (false positives and false negatives, blacklists, whitelists) within the Techstrata Managed Security Operation Analysts security toolset. • Escalate incidents to identified client contacts for further remediation.

Testing of Monitoring and Response Capabilities
The Client may test SOC monitoring and response capabilities by staging simulated or actual reconnaissance activity, system, or network attacks, and/or system compromises. Such activities may be initiated directly by Client or by a contracted third party. Client shall notify the SOC testing email at least fourteen (14) days in advance of testing with the expectation that analyst activities will not be notified of testing. Testing performed on newly added (within 60 days) assets or data feeds should be communicated to the SOC via advance electronic or written notice to ensure SOC personnel have properly onboarded new information and that all monitoring and response capabilities are working properly. SLOs will not apply during the period of staged or testing activities.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 19
Scheduled and Emergency Maintenance
Scheduled maintenance means any maintenance that is performed during a scheduled maintenance window or in which Client is notified at least one day in advance. Notice of scheduled maintenance will be provided to the Client’s Authorized Point of Contact. Emergency maintenance means any non-scheduled, non-standard maintenance required by SOC. No statement in the section of any Services entitled "Service Level Objectives" shall prevent SOC from conducting emergency maintenance if it is critically necessary for the integrity and security of the Services. During such emergency maintenance, Client’s Authorized Point of Contact will receive notification of initialization of the emergency maintenance, and of the completion of the emergency maintenance. The SOC will be relieved of its obligations under the applicable SLOs during scheduled and emergency maintenance.

File Sample Submissions
The EDR and SIEM SOC services may detect suspicious or malicious executable files on endpoints.

Sometimes it is necessary to perform additional investigations to understand an attack. In these cases, Techstrata Managed Security Operation Analysts may retrieve file samples of suspicious or malicious files from an endpoint to perform additional analysis.

By allowing sample submissions, our analysts are enabled to provide more in-depth analysis and context to their investigations of potential incidents, as well as enhancing the detection and prevention of future incidents that may involve the same file(s).

Part of this process may require our analysts to automatically request samples of files, scripts or other source detected in Client or End Client environments to perform further analysis. In addition to our own in-house analysis, Techstrata Managed Security Operation Analysts may use outside services including but not limited to:
• VirusTotal
• Opswat MetaDefender
• Joe Sandbox
Unless the Client opts-out of File Analysis Submissions, the SOC will request samples from an endpoint and upload potentially malicious files for analysis as needed.

By allowing permission for the SOC to upload unknown binaries, SOC Analysts will either manually or automatically upload unknown binaries to outside analysis services:
• Sample binary or its hash representation will be submitted to the appropriate analysis service.
• Terms of Service and Privacy Policy for each service will apply. - • The SOC shall not be responsible for this submission or for any act or omission by any online service.

You are hereby advised some / most analysis services make the file metadata publicly available, along with scan results from numerous anti-virus products. Service providers may also make the files samples available for download to partners.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 20
Host Isolation Terms
With our EDR offerings (If client selects Techstrata EDR offering from SentinelOne), Techstrata Managed Security Operation Analysts SOC has the ability to isolate machines on a Client or End Client’s network that have an agent installed. The SOC uses host isolation to prevent the spread of malicious code by preventing a compromised machine from communicating to other network devices on the Internet or the Client or End Client’s network. The isolated machine will maintain connectivity to SOC and allow our analysts to continue investigation without risking other network devices to malicious code or active attacks.

Unless the Client opts-out, Techstrata Managed Security Operation Analysts will isolate potentially compromised machines. Techstrata Managed Security Operation Analysts will manually isolate the machine using the installed Endpoint Agent and notify the client of the isolation via an incident for escalation. The machines will remain in isolation until the threat has been remediated or the client has specifically said they accept the risk and request the SOC to remove the isolation. • The client commits to identifying production impacting servers and assets that are NOT to be isolated unless the client has given written authorization. Client recognizes they assume all risk for non-isolated machines and the spread of any attack profile due to this. • The SOC commits to isolating machines that are NOT on the unauthorized list only to prevent the spread of malicious code and lateral movement by suspected attackers. • The SOC will escalate all incidents that require isolation to the client for their visibility and active feedback on the incident.

Clients are hereby advised that the SOC has the functionality to isolate machines on your network or End Client’s network with installed Techstrata EDR offerings (SentinelOne MDR/EDR), that the SOC has the ability to use this function to protect the network, and that the isolated machines will lose all connectivity to all other devices on the network.

Automated Remediation
Some incidents can be remediated by the Techstrata SOC Analysts and EDR agents. These remediation actions are visible in the endpoint console. Clients can opt-out of allowing SOC Analysts to execute the automated remediation actions on affected endpoints. The current remediation actions that can be performed are, but are not limited to:
• Kill Process
• Quarantine Files
• Remediate Threat
• Rollback Threat
Clients are hereby advised that the SOC has the functionality to remediate machines on your or your IT computing systems and network, that the SOC has the ability to use this function to protect the network, and that the SOC is not liable for downtime as the result of remediation actions that were taken.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 21
Techstrata endeavors to provide the following service levels:
• EDR Initial Threat Analysis SLO: Completed within 1 hour of alert and incident created if necessary.
• SOC Initial Threat Analysis SLO: Completed pursuant to product purchased and incident created if necessary.
• Client Created Ticket Initial Response SLO: Varies by priority (Low – 4 hour, Medium – 4 hour, High – 2 hour, Urgent – 1 hour)
• Voicemail Response: All voicemails to the SOC are classified as Urgent tickets with a 1 hour initial response goal
Techstrata SOC Ticket Categories
When you contact Techstrata SOC team to request the investigation of an alert, tickets are categorized according to the following criteria:

Low The initial categorization for all tickets while the SOC assesses the data to determine the significance of the
event. If a threat warrants additional attention, its ticket priority is adjusted accordingly.

SLO response
time = 4 hours
from when the
ticket is received
Medium Indicates a threat that requires attention but does not present an immediate critical security issue.

SLO response
time = 4 hours
from when the
ticket is received
High Indicates a threat that poses a security concern but does not represent a breach or other critical issue.

SLO response
time = 2 hours
from when the
ticket is received
Urgent A critical emergency.

If you leave a voicemail for the SOC requesting the further investigation of an alert, the resulting ticket is automatically assigned a priority of Urgent, while the context of the alert is assessed.

SLO response
time = 1 hour from
when the ticket is
received
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 22
Manged Security and Vulnerability Management
Techstrata managed Security Vulnerability Management consists of the Service Features set out in the table below.

Techstrata Vulnerability Management Service Features
Service-specific Service Features
External Scanning
Internal Scanning
Self-Scanning
Policy Templates and Customizations
Reporting
Tuning
Client Notification
Reporting
Common Service Features
Security Incident Management
Availability Management
Event Management
Capacity and Performance Management
Service Asset and Configuration Management
Change Management
MSS Vulnerability Management Service Features
Request Fulfilment
Service Level Management
Service Options
Techstrata offers vulnerability scanning services through a combination of Service tiers, license levels, scan frequencies, and optional services, which determines the Service Features available to Client as described below:

MSS Security Device Management Service Features
Scan Configurations
Standard Reports
Custom Reports
SOC Scan Reviews
On-Demand Scans
Pre-Configured Assets
Discovery Scans & Report
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 23
Techstrata will establish an agreement with Client to set up scan configurations based on the Service tier selected.

Techstrata Security Scanning Service-Specific Service Features External Scanning
Techstrata will specifically examine Client’s security profile from the perspective of an external outsider.

Internal Scanning
Techstrata will operate internal vulnerability scanning inside Client’s firewall(s) to identify real and potential vulnerabilities inside Client’s network.

Techstrata will manage and execute scans by clients approval and change management process approval.

Policy Templates and Customisation
Techstrata will create customized scanning templates for Client’s environment.

Reporting
Techstrata will make:
a. standard reports available to Client in line with the applicable Service tier; and b. custom reports available using standard templates only.

Security Analyst Review
A Techstrata Project manager/security analyst will provide the results and scan status review, in line with the applicable services performed.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 24
Key Decision Drivers for our TechStrata Managed Security Services • Client’s staff is not experienced managing and monitoring information Security Service and internal Security Operation team to prepare, detect, analyze, respond, recover, and review Cybersecurity incidents and threats
• Client’s staff is not available or cost effective to provide 24 x 365 Monitoring and skill set to responsible for cybersecurity incident management (IM), planning, response, and plan evaluation
• Client resources are limited or unavailable to provide Cybersecurity leadership and expertise to build and improve information Security programs • Client desires to protect their information security posture is maintained and with an understanding of the strengths and weaknesses of their organization's security program and needs for measurable improvement to security posture. • Client lacks expertise or resources to rapidly prepare, detect, analyze, respond, recover, and review cybersecurity incidents
• Client is concerned about how to prepare, detect, analyze, respond, recover, and review cybersecurity incidents
• Client lacks skill set to prepare, detect, analyze, respond, recover, and review cybersecurity incidents
Key Benefits of TechStrata Care Support Services
• Techstrata MSSP provides 24/7/365 threat monitoring and response o Cybercriminals don’t work normal hours.
o Attacks can hit at any time, and the Techstrata Managed Security Services team is ready when the time comes.
o We’re continuously monitoring, detecting, and remediating threats to keep your environment secure.
• Techstrata MSSP has staffed team of security experts
o Our team includes certified security techs, including security analysts, incident response analysts, security researchers, and threat hunters. o Our team will take care of alerting and triaging and consult you when there are issues they need to handle.
• Cutting-edge security intelligence
o The threat landscape is always changing. Techstrata vCISO and Security Analysts are dedicated to identifying the latest threats. o Techstrata Managed Security team is on high alert to catch what’s lurking in the shadows in customers information systems and network infrastructure • We Keep your business and critical information safe
o It’s hard, and expensive, to build out a security team, let alone a fully staffed, 24/7 in-house security team.
o We’ll jump in when it comes to keeping your IT environment secure and take the burden off your already full plate.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 25

1.0 Project Description
The City of Loma Linda seeks a partnership with a Managed Security Service Provider (MSSP) / Managed Detection and Response (MDR) practitioner for 24/7/365 security monitoring and advanced security detection capabilities within a (1) - Year, annually renewed service contract.

The selected vendor is expected to provide cost-effective solution for the immediate and long-term.

The contract will also include regular status reports to City’s IT leadership team.

2.1 City of Loma Linda Requirements
Real-Time Perimeter Monitoring
The city seeks a service provider who can add value to security information and log management by assessing real-time data (REAL-TIME PERIMETER MONITORING TIER) and optionally, stored logs (LOG COLLECTION AND ANALYSIS TIER) to add context to incident identification and response. Each service tier shall be quoted. In addition to the requirements set forth below, City of Loma Linda requires the MSSP to designate an account manager for the entire duration of the contract. The MSSP account manager will participate in quarterly status meetings, provide the City with SLA and other reports and escalate any issues according to defined escalation procedures, etc. City of Loma Linda requires MSSP to have a Security Operations Center(s) (SOC) that operates 24 hours a day, 7 days per week. The SOC engineers shall be reachable by telephone and e-mail.
>Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work “virtual” Chief Security Officer (vCSO)

1. The MSSP Shall designate a Consultant staff member as the City’s part-time or “virtual” Chief Security Officer (vCSO) who will be the lead consultant on matters of IT security and risk assessment.

2. Identify, report, and resolve critical security issues.

3. Advise the City on risk reduction strategies, compliance, governance, user awareness, security training, and strategic security planning.

4. Ensure the City network, servers, and computers are meeting levels of security established by the City, based on NIST 800-53.4 or equivalent security framework agreed upon by the City.

5. Review, revise, and/or construct the City’s IT Security Policies and procedures to industry standards annually or as requested.

6. Review, revise, and/or construct the City’s Disaster Recovery Plan to industry standards annually or as requested.

7. Participate in security incident response exercises conducted by the city.

8. Review and contribute to the City’s Risk Register and Plan of Action and Milestone documents as requested and recommend activities to reduce risks and vulnerability. >Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 26
Incident Response and Management
The MSSP shall record all incidents in an issue tracking system and make such system available to appropriate City personnel. Individual contacts should be able to obtain real time and historical performance data for all monitored devices. They are also the primary contacts for the Managed Security Service Provider (MSSP) in case of security incidents, monitored device outages or scheduled maintenance notifications.

Incident Response, as a term, typically refers to either all five of the below lifecycle phases/processes, or one or more of the latter three components. The extent of IR is typically defined by the organization’s Incident Response Plan, and the nature of the potential incident. IR case managementinvolves activities across part or all the IR lifecycle phases/processes:
• Preparation: Including (i) Security Hygiene, (ii) Integrity Checking, (iii) Vulnerability Management, (iv) Management of Security Sensors, Tools and Systems/services, (v) Threat Intelligence, (vi) IR and Crisis Communications plans and planning, and (vii) exercises (suchas table-tops, “red/blue teaming,” and “capture the flag” drills, etc.). • Detection, Data Analysis, and Notifications: Consists of (i) Threat hunting, crosscorrelating, identifying and investigating suspicious events and activity to confirm existenceof a cyber-incident, (ii) prioritizing the response based on impact and (iii) coordinating notifications of the technologists, business process owners, and Public Information Officer (PIO) throughout an active incident. This component may also be included within Security Monitoring.
• Containment, Eradication, and Restoration: Involves (i) Isolating affected systems to prevent collateral damage, escalation and to limit impact, (ii) pinpointing the genesis of the incident and quarantining, neutralizing and removing the threat, (iii) restoring systems and data when a threat has been mitigated. This component is sometimes called “prosecuting the incident.”
• Cyber-Forensics: The examination of digital media in a forensically sound manner with the aim of identifying, preserving, recovering, analyzing and presenting facts and opinions about the digital evidence, events they capture, and those involved. The preserved evidence as well as analysis may be used in Post-Incident Activities. Additionally, a hand-off between resources is also involved or addressed in an IR Retainer. • Post-Incident Activities: Including (i) Recovery/rebuilding of systems and business operations, (ii) identifying improvements needed in Preparation, Security Monitoring, and Prosecuting the Incident, and then executing remediation projects to effect same, and may include (iii) administrative, insurance, legal or other civil actions >Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 27
Figure 6- Techstrata Managed Service threat isolation and remediation screen shot Log Collection and Vulnerability Analysis
Provide real-time monitoring, event correlation, and analysis. Provide security log aggregation, collection, retention, archival and analysis of such for compliance reporting and vulnerability/exploit remediation recommendations. Regular inspection of collected log data is required with special attention given to identifying evidence of privilege escalation and unauthorized creation of accounts.

Log collection requirements shall include the acquisition of all log data and the retention of that data for 18 months, even after review and reporting, to meet the City’s auditing and compliance needs. >Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work Please see next page for Figure 2- Techstrata Managed Service Real time monitoring dashboard City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 28
Figure 7- Techstrata Managed Service Real time monitoring dashboard Figure 8- Techstrata Managed Service Security Log Aggregation Figure 9- Techstrata Managed Service Logs of Privilege elevation City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 29
Figure 10- Techstrata Managed Service Cloud and O365 Alerts Reporting
The MSSP shall provide on-demand and ad-hoc reporting abilities to view the collected data and provide analysis and suggest classification in a context relevant to compliance with NIST standards.

The MSSP should also be able to provide a streamlined process for generating reports in anticipation for risk assessments and audits.
>Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work Cloud Service Monitoring
The MSSP shall monitor the City’s cloud resources and user behavior to ensure compliance with security policies. This includes monitoring user and administrator access, behavior, and API access.
>Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work Figure 11- Techstrata Managed Service Cloud Monitoring Dashboard City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 30
Custom Security Rules
The MSSP shall allow for the creation of custom, user-defined security rules based on the specific information security policies of the City. These rules should be easily accessible for creation, viewing, modification, and maintenance.
>Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work Security Awareness (User based Training)
The MSSP shall offer security awareness that provides user training about data security, cybersecurity hygiene, email attacks, and your policies and procedures. The MSSP shall offer a web-based training solution for teaching city staff and users about security policies. >Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work Point Of Contact
Because of the nature of a MSSP, the city will require a specific account manager with extensive knowledge of the city’s configuration and set up to facilitate analysis of events & log data, troubleshoot, and support the city resources with the implementation of the product. Furthermore, the MSSP contact must be able to provide actionable remediation recommendations to the city based on the specific regulatory needs of the organization. >Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 31

3.0 Statements:

All responses to this RFP become the property of the City (City of Loma Linda) and will be kept confidential until recommendation for award of a contract has been announced. Thereafter, submittals are subject to public inspection and disclosure under the California Public Records Act. If a Respondent believes that any portion of its submittal is exempt from public disclosure, such portion may be marked “confidential.” The City will use reasonable means to ensure that such confidential information is safeguarded but will not be held liable for inadvertent disclosure of such materials, data and information. Submissions marked “confidential” in their entirety will not be honored as such and the City will not deny public disclosure of all or any portion of submittals so marked.

By submitting information with portions marked “confidential” the Respondent represents it has a good faith belief that such material is exempt from disclosure under the California Public Records Act and agrees to reimburse the City for, and to indemnify, defend and hold harmless the City, its officers, fiduciaries, employees and agents from and against: (a) any and all claims, damages, losses, liabilities, suits, judgments, fines, penalties, costs and expenses including, without limitation, attorneys’ fees, expenses and court costs of any nature whatsoever (collectively, “Claims”) arising from or relating to the City’s non-disclosure of any such designated portions of a proposal if disclosure is deemed required by law or court order. The City reserves the right to disclose any documents marked “confidential” if required to do so under the California Public Records Act or pursuant to any other local, state or federal statute or court order.

If a bidder discovers any ambiguity, conflict, discrepancy, omission or other error in this RFP, please immediately notify the City of such error by e-mail at:

Kyle MacGavin, System Analyst III
City of Loma Linda
E-Mail: [email protected]
If it becomes necessary to revise any part of this RFP, or if a more exact interpretation of provisions of this RFP are required prior to the due date for proposals, a supplement will be sent to all bidders.

The City reserves the right to extend the due date of proposals to accommodate such interpretations or additional data requirements.

Submission of information indicates acceptance by the bidder, of the terms and conditions contained in this RFP, unless exceptions are clearly and specifically noted in the submittal. If the bidder objects to any term(s) in the RFP, or wishes to modify or add terms to a subsequent contract, the submittal must identify each objection, propose language for each modification and include the reasons for the modification. The City reserves the right to modify the terms prior to execution.

The Proposal determined to be the most advantageous to the City, taking into account all of the selection criteria, may be selected by the City or further action, such as a contract award. If, however, the City decides that no proposal is sufficiently advantageous to the City, we may take whatever further action is deemed best in its sole discretion, including making no contract award. If, for any reason, an awardee is selected and it is not possible to consummate a contract with the bidder, the City may begin contract discussions with the next qualified bidder or determine that it does not wish to award a contract pursuant to this RFP, at its sole discretion.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 32

3.1 Bidder Guarantees
a) The bidder guarantees that it can and will provide, at a minimum, the services set forth within the RFP.
>Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work

3.2 Bidder Warrantees
a) Bidder warrants that it is willing and able to comply with State of California laws with respect to foreign (non-State of California) corporations.
b) Bidder warrants that it will protect the privacy and provide for the security of the City’s member data and that Bidder will require its officers, employees and agents to sign a Confidentiality Agreement provided by the City.
c) Bidder warrants that it will not subcontract or delegate its responsibilities under an agreement without the prior written permission of the City.
d) Bidder warrants that all information provided by it in connection with this proposal is true and accurate.
e) Bidder acknowledges they have read and reviewed all contents of this RFP. The signature below warrants the bidder’s ability to complete the described Statement of Work in accordance with the terms and conditions set forth herein.
f) Bidder warrants expenses incurred in the preparation of proposals in response to this RFP are the sole responsibility of the vendor.
>Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managd Service Provider RFP Scope of Work

3.3 Right of Rejection

3.4 Insurance Requirements
Vendor proposing any installation services shall purchase and maintain insurance in the types set forth below which may arise out of or result from the contractor's operations under the contract, whether such operations performed by the contractor or subcontractor or by anyone directly employed by either, for an amount of no less than $1,000,000:

Commercial general liability
Workers’ compensation insurance
Personal injury liability coverage
Comprehensive Automobile Liability insurance
All policies required above are to be primary and non-contributory with any insurance or selfinsurance programs carried or administered by the City’s. >Techstrata acknowledges and declares that we will fulfill the requirements as detailed in the City of Loma Linda Managed Service Provider RFP Scope of Work.

Please see Appendix B, Techstrata Insurance Accord.

City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 33

4.0 Vendor Preference and Information

4.1 Local Vendor Preference
The City of Loma Linda has established a local vendor preference. When quality, service, and other relevant factors are equal, responses to Requests for Proposals will be evaluated with a preference for local vendors. Note the following exception:

1. Those contracts which State Law or, other law or regulation precludes this local preference.

A “local” vendor preference will be approved as such when 1) The vendor and or their partner conducts business in a fully staffed office with a physical address within the Southern Californian region; 2) The vendor or their partner holds a valid business license issued by the County or a City within the Southern Californian region; 3) The vendor or their partner has conducted business at the local address for not less than six (6) months prior to the due date of this Request for Proposal; 4) The vendor or their partner has experience for not less than six (6) months supporting the Federal, State, Local or Education businesses.
<For the purpose of this Request for Proposal the Southern California region is made up of the Imperial, Kern, Los Angeles, Orange, Riverside, Santa Barbra, San Bernardino, San Diego, San Luis Obispo, and Ventura California Counties>
YES NO
Do you claim local vendor preference?
Do you conduct business in an office with a physical location within the Southern California region?
Have you served the Federal, State, Local Government or Education Markets for more than six (6) months
Business Address: 9871 Irvine Center Drive, suite 100, Irvine, CA 92618 Years at this Address: 12 years
Does your business hold a valid business license issued by a County or a City within the Southern California?
✓
✓
✓
✓
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 34

4.3 Organization and Bidder Questionnaire
Date of Response
Company Name
Primary Contact Person
Title
Address
Telephone Number
Facsimile Number
E-mail Address

4.4 Bidder Background Questionnaire
Please state the date your company started in business. _____________________ Where is your closest support facility/sales office? _________________________ Where is your headquarters office? ______________________________________ Is your company an equal opportunity employer?
Yes: ___________ No: __________
Does your company have any family or business relationships with the City’s Council members? ____Yes or ____No. If yes, please explain
________________________________________________________________________ ________________________________________________________________________ Please list any special capabilities or qualifications that you would like considered in evaluating your company.
06/02/2022
Techstrata LLC.

Mike Khalili
Account Manager
Techstrata is a leader in Managed Security Services and solutions in Southern California region.

We are dynamic, diversely talented, customer-centric, laser focused, and our mission is to defend and protect our clients from cyber adversaries through advisory, consulting, managed security services, engineering, design implementations and operational services which are based on our core values of innovation, quality, reliability, and integrity.

Techstrata Managed Security Service valuable managed services and benefits to its City of Loma Linda:
• Proven ability: we have been providing ongoing support and services for the City Network Infrastructure and community for the past several years. •Techstrata has on-boarded hundreds of clients for Managed Security Services; this will be crucial as we provide Security Managed services for City’s Information Technology services, Servers, end points and end users.
•Techstrata’s vCISO, who has the many security qualifications, and many years of Information Security experience and protecting his customers from assorted attacks, will be at the service of the city.
• 24x7 SOC to provide ongoing Monitoring and Security Managed Services: Techstrata’s dedicated security analysts and experts will provide ongoing monitoring and will alert clients the email or phone call during the requisite time frame and SLA. Escalations are made rapidly to higher level engineers so that end users receive rapid, efficient response to their questions. (949) 503-6140
2010
[email protected]
Irvine, CA
Irvine, CA
✓
✓
(949) 503-6144
9871 Irvine Center Drive, suite 100, Irvine, CA 92618
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 35

4.5 Litigation
Over the past five years, has the bidding
company or any officer or principal, been
involved in any business litigation or other
legal proceedings related to the sale of
software agreements? If so, please
provide a brief explanation and indicate
the current status.

Please sign physically or digitally to confirm you and your organization agree to the City’s statements and terms. Return a copy of this RFP with your response via email as a word or PDF file to or by mail/delivery ATTENTION: Kyle MacGavin 25541 Barton Rd. Loma Linda, CA 92354.
______________________________________
Company Name
Responder’s Name Responder’s Title
___________________________________ ______________________ Signature Date
NO
Techstrata LLC.
______________________ Mike Khalili _______ ______________________ Account Manager_______ 06/02/2022
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 36
Appendix A- Techstrata Managed Services pricing for City of Loma Linda City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 37
Appendix B- Techstrata Insurance Accord
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 38
Appendix C- Techstrata Cybersecurity Structure/Chart
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 39
Appendix D - Techstrata Managed Security Service Contact Center Contact Information & Escalation point
City of Loma Linda Managed Security Service Provider RFP Response Techstrata Managed Security Services Response 40
CC AGENDA ITEM 9b

CC AGENDA ITEM 9c

CC AGENDA ITEM 9d

CC AGENDA ITEM 9e

CC AGENDA ITEM 9f

City of Lotna Linda
Official Report
COUNCIL AGENDA: June 14, 2022
TO: City Council
Phillip Dupper, Mayor
Ronald Dailey, Mayor pro tempore
John Lenart, Councilman
Bhavin Jindal, Councilman
Rhodes Rigsby, Councilman
Approved/Continued/Denied
By City Council
Date --------
FROM: T. Jarb Thaipejr, City Manager/Public Works Director SUBJECT:

RECOMMENDATION
Award of Heating, Ventilation and Air Conditioning Services Contract for 2022-2024.

It is recommended that City Council approve two-year contract from July 1, 2022 to June 30, 2024 to Loma Linda Heat & Air of Loma Linda, CA for heating, ventilation and air conditioning (HV AC) maintenance service for all City facilities in an amount of $3,840.54 per quarter, ($15,362.16 annually).

BACKGROUND
The City of Loma Linda has maintained a professional working relationship with this contractor and have been very satisfied with services provided. The previous contract has run its course with all optional extensions being exercised. Staff prepared and advertised for proposals on April 21, 2022.

ANALYSIS:

This is the only proposal submitted for opening. Staff analyzed and compared the proposal to the existing contract and found it to be in line with current costs. This contractor has worked well with staff and has met or exceeded the needs of the City.

FINANCIAL IMPACT:

Funding for this services is from Accounts 0013030, 0013200, 0013400, 0014200, 0014400, 0015500, 4053500, 4657010, 4405900 -51830 (City buildings)
!:\Public Works Admin\Staff Reports\Award ofContract\Contract Renewals 2021-22 06-29-21.doc CC AGENDA ITEM 9g
CC AGENDA ITEM 10

CC AGENDA ITEM 11
CC AGENDA ITEM 12
AMENDMENT NO. 8 TO THE
WASTE DISPOSAL AGREEMENT NO. 98-745
On August 25, 1998, the City of Loma Linda (“City”) and the County of San Bernardino (“County”) entered into a Waste Disposal Agreement (“WDA”). The parties hereby amend the WDA, on the Effective Date as provided herein, by their respective execution of this agreement (hereinafter “Amendment’).

Recitals
A. The parties have previously entered into the following amendments to the WDA. Amendment No. 1 to the WDA was to implement the “Article 19 Solid Waste” component of the County’s waste management system and define the City’s share of that revenue. Amendment No. 2 was to increase the annual maximum limits of “Article 19 Solid Waste” in the County landfill system. Amendment No. 3 allowed the County to charge the fee of $10.00 per ton (prorated) for identified controllable waste of the City (e.g., roll off container trucks and other County/City vehicles such as pickups and dump trucks) and have such waste subject to being processed in the recycling program. Amendment No. 4 allowed the County to calculate the annual cost of living adjustment earlier in the calendar year. Amendment No. 5 extended the end date of the WDA to June 30, 2016. Amendment No. 6 extended the term of the WDA to June 30, 2021, applied an annual fixed WDA renewal discount adjustment of $0.82 per ton for the term of the WDA, and allowed the County to enter into agreements to accept in-County waste from non-WDA users of the Disposal System at a rate lower than the WDA Contract Rate in exchange for sharing the net revenue generated from those agreements. Amendment No. 7 reset the WDA Contract Rate and extended the term five (5) years to June 30, 2026.

B. In connection with the ongoing administration of the WDA, the parties have determined it is now in their best interests to cap the WDA Contract Rate in order to maintain a 15% buffer between the WDA Contract Rate and the County’s posted gate rate.

C. This change will assist both the City and the County in planning for future fiscal years’ budgeting of solid waste disposal services and costs by putting a mechanism in place for the future to prevent compaction with the County’s posted gate rate.

NOW THEREFORE, in consideration of the forgoing recitals and the following covenants and promises the Parties agree as follows:

1. Amended Section 4.2 CONTRACT RATE. (A) Generally. This section is amended in its entirety to read:

SECTION 4.2. CONTRACT RATE. (A) Generally. Effective July 1, 2022, the Contract Rate payable by each Franchise Hauler shall be $40.75 per ton, subject to potential adjustment necessary to reflect the circumstances set forth below:
(i) increased costs incurred by the County (in excess of available insurance proceeds) due to the occurrence of one or more Uncontrollable Circumstances, including Changes in Law; and
(ii) escalation during the Term of this Agreement calculated in accordance with Section

4.2(B). In no case will the calculation of escalation exceed 85% of the County approved general public gate rate (currently $59.94 minus the current CDSDP recycling fee of $12.00), as such fees may be amended.

Prior to adjusting the Contract Rate as a result of any of the circumstances described in Section

4.2(A)(i), the County shall utilize the following remedy: reduce the costs of operating the Disposal System to the extent practicable.

Any adjustments to the Contract Rate permitted by Section 4.2(A)(i) shall be calculated by the County to reflect the actual costs or expenses of addressing the circumstance or circumstances pursuant to which the adjustment is authorized, and shall also reflect, where applicable, the then remaining capacity in the Disposal System. Such adjustment may not reflect circumstances other than the circumstances described in Section 4.2(A)(i).

2. Amended Section 4.2. CONTRACT RATE. (B) Calculation of Escalation. This section is amended in its entirety to read:

SECTION 4.2. CONTRACT RATE. (B) Calculation of Escalation. For purposes of Section 4.2(A)(ii), the Contract Rate shall be adjusted in accordance with the formula described in this Section each July 1 during the term hereof, commencing July 1, 2022. The adjustment shall be calculated in accordance with the following formula:

Contract Rate = Fixed Portion + [Escalating Portion x Index] Where,
Fixed Portion = $10.87
Escalating Portion = $27.13
Index = Price Index, which shall be determined in accordance with the following formula:

I = .7[PPI1/PPI2] +.3[EI1/EI2]
PPI1 = The Producer Price Index, Industrial Commodities Commodity Data, as published at the United States Department of Labor, Bureau of Labor Statistics web site, Series ID WPU03 thru 15 for the month of September in the year prior to the year for which the adjustment is being made (e.g., the adjustment effective July 1, 2011 will use the September 2010 value)
PPI2 = Producer Price Index, Industrial Commodities Commodity Data for the month of September, 1997
EI1 = Employment Cost Index, Total Compensation, Private Industry All Workers, as published at the United States Department of Labor, Bureau of Labor Statistics web site, Series ID:

CIU2010000000000I for the last quarter of the year preceding the year for which the adjustment is being made (e.g., the adjustment effective July 1, 2011 will use the third quarter, 2010 value)
EI2 = Employment Cost Index, Compensation, Private Industry All Workers, as published at the United States Department of Labor, Bureau of Labor Statistics web site, Table 3, established for the third quarter of 1997.

Effective July 1, 2022, and each July 1 thereafter during the term of the Agreement, the Contract Rate adjustment will be calculated as provided above, except that an annual fixed WDA renewal discount adjustment of $0.82 per ton will be applied after the annual Cost of Living Adjustment (COLA) adjustment.

In no case will the adjustment to the Contract Rate exceed 85% of the County’s approved general public gate rate (without the current CDSDP recycling fee of $12.00), as such fees may be amended. For example, the current County’s posted gate rate is $47.94 ($59.94 minus the $12 CDSDP fee). Therefore, the WDA Contract Rate cannot be more than 85% of that rate, which is $40.75. However, if the County adjusts its posted gate rate in any future year of the term of the WDA, the WDA Contract Rate will be adjusted according to the above calculation formula, including the renewal discount adjustment of $0.82 per ton, up to the maximum of 85% of the newly posted gate rate. If the calculated annual adjustment of any year would exceed the 85%, then the capped maximum amount of 85% will be used. If, however, the posted gate rate does not change, and the WDA Contract Rate is already at the capped 85% amount, the WDA Contract Rate will remain the same for the calculated fiscal year. Any decrease in the calculated adjustment to the Contract Rate, calculated according to the above formula, including the renewal discount adjustment, will be applied to the then WDA Contract Rate.

Please note that, due to timing, in future years where the gate rate is recommended to be increased, the WDA rate notification letter may be delayed until final approval of the gate rate by the Board of Supervisors.

If at any time either the Employment Cost Index or the Producer Price Index is no longer published, or are otherwise unavailable, then the COLA shall be determined by using standard official statistics measuring changes to, respectively, labor costs and cost of materials, as the parties shall mutually agree.

3. Amended Section 5.2 CITY CONVENIENCE TERMINATION. This section is amended in its entirety to read:

SECTION 5.2. CITY CONVENIENCE TERMINATION. In exchange for capping the WDA Contract Rate, the City agrees to commit to remaining a WDA City, with no provision to terminate without cause, for the remainder of the WDA Term.

4. Effective Date. This Amendment shall be effective if and only when all fifteen cities/towns listed on Exhibit A have each adopted and executed a counterpart of this Amendment No. 8 (the amendment number may differ for each city/town listed on Exhibit A) and such amendment has been adopted and executed by the County on or before June 30, 2022. In all events, the conditions in the forgoing sentence shall occur otherwise this Amendment No. 8 shall be null and void and without any effect whatsoever.

5. This Amendment may be executed in any number of counterparts, each of which so executed shall be deemed to be an original, and such counterparts shall together constitute one and the same Amendment.

The parties shall be entitled to sign and transmit an electronic signature of this Amendment (whether by facsimile, PDF or other email transmission), which signature shall be binding on the party whose name is contained therein. Each party providing an electronic signature agrees to promptly execute and deliver to the other party an original signed Amendment upon request.

6. Except as modified in this Amendment (or in any prior Amendment(s)) all other terms and conditions of the WDA shall remain in full force and effect.
///
///
///
///
///
///
///
///
///
///
///
///
///
///
///
///
///
///
///
///
IN WITNESS WHEREOF, the parties have caused this Amendment to be executed by their duly authorized officers or representatives as of the day and year first above written.

Approved as to Legal Form Reviewed for Contract Compliance Reviewed/Approved by Department Jolena Grider, Deputy County Counsel Andy Silao, P.E. Brendon Biggs, Director Date Date Date

SAN BERNARDINO COUNTY
City of Loma Linda
(Print or type name of corporation, company, contractor, etc.) By
Curt Hagman, Chairman, Board of Supervisors (Authorized signature - sign in blue ink) Dated: Name
SIGNED AND CERTIFIED THAT A COPY OF THIS (Print or type name of person signing contract)

DOCUMENT HAS BEEN DELIVERED TO THE
CHAIRMAN OF THE BOARD Title
Lynna Monell
Clerk of the Board of Supervisors
of San Bernardino County
(Print or Type)
By Dated:

Deputy
Address 25541 Barton Road
Loma Linda, CA 92354

EXHIBIT A

CITIES/TOWNS WITH A WASTE DELIVERY AGREEMENT

WITH THE COUNTY OF SAN BERNARDINO
OFFERED THIS AMENDMENT JUNE 2022
FOR AN AGREEMENT END DATE OF JUNE 30, 2026

1. ADELANTO

2. APPLE VALLEY

3. BARSTOW

4. BIG BEAR LAKE

5. COLTON

6. FONTANA

7. GRAND TERRACE

8. HESPERIA

9. HIGHLAND

10. LOMA LINDA

11. RIALTO

12. TWENTYNINE PALMS

13. VICTORVILLE

14. YUCAIPA

15. YUCCA VALLEY
CC AGENDA ITEM 13

CC AGENDA ITEM 14
CC AGENDA ITEM 15