ALLIANT
Agreement for Professional Services
City of Marysville Alliant Networking Services, Inc.
July 1, 2026 One (1) Year July 1, 2024
$19,897.00 None (1-Year Term) $350 / hour
N E T W O R K I N G S E R V I C E S
Your Local IT Ally Since 2004
Managed Technology, Cybersecurity & Virtual CIO Services CITY ("CLIENT")
526 C Street
Marysville, CA 95901
Attn: Jim Schaad
CONSULTANT ("PROVIDER")
1521 Starr Dr. Suite C
Yuba City, CA 95993
Attn: Jason Gretsch
EFFECTIVE DATE INITIAL TERM REPLACES AGREEMENT DATED
MONTHLY FEE ANNUAL ADJUSTMENT EMERGENCY RATE
AGREEMENT FOR PROFESSIONAL SERVICES
This Agreement is made and entered into as of July 1, 2026 by and between the City of Marysville ("City") and Alliant Networking Services, Inc. ("Consultant"). This Agreement supersedes and replaces all prior agreements between the parties, including the Agreement for Professional Services dated July 1, 2024.
Recitals
A. The Consultant is specially trained, experienced and competent to provide the professional services required by this Agreement, having served as the City's managed technology partner since 2015. B. The Consultant possesses the skill, experience, ability, background, certifications, and knowledge to provide the professional services described in this Agreement. C. City desires to retain Consultant to render the professional services as set forth in this Agreement, including managed IT services, cybersecurity operations, virtual CIO services, and compliance program management.
1. Scope of Services
The Consultant shall furnish the services described in Exhibit "A" which is attached hereto and incorporated herein by reference. Consultant shall provide such professional services at the time, place, and in the manner specified in Exhibit "A," subject to the direction of the City through its designated authorized contacts.
2. Term
This Agreement shall commence on July 1, 2026 and remain in effect for a period of one (1) year, expiring June 30, 2027, unless terminated as provided herein. Following the initial term, this Agreement shall renew automatically on a month-to-month basis at the same monthly rate, unless either party provides sixty (60) days written notice of nonrenewal or the parties execute a new agreement.
3. Compensation
Compensation to be paid to Consultant shall be $19,897.00 per month for the services described in Exhibit "A." Payment by City under this Agreement shall not be deemed a waiver of defects in Consultant's services, even if such defects were known to the City at the time of payment.
Note: This one-year agreement carries no annual escalator. The monthly fee is fixed for the initial one-year term.
4. Method of Payment
Consultant shall invoice City in advance, on or before the first day of each calendar month, for that month's services.
Payment is due on or before the first day of the month in which services are to be rendered. Overdue balances beyond thirty (30) days shall accrue a late fee of 1.5% per month. Consultant may suspend services for balances overdue beyond thirty (30) days following written notice to the City.
5. Additional Services
At any time during the term of this Agreement, City may request that Consultant provide Additional Services. "Additional Services" means any services determined by City to be necessary but not included in Exhibit "A," including project work, emergency engagements, security incident response, and off-boarding services. Consultant shall not perform, nor be compensated for, Additional Services without prior written authorization from City specifying the services, personnel, and not-to-exceed cost. Additional Services are billed at $175/hour during business hours and $350/hour for after-hours or emergency work unless otherwise quoted in writing.
6. Termination
Termination for convenience: The City may terminate this Agreement for convenience during the initial term upon ninety (90) days written notice, subject to an early termination fee equal to fifty percent (50%) of the remaining contract value.
Termination for cause: Either party may terminate for material breach upon thirty (30) days written notice if the breaching party fails to cure the breach within the notice period.
Post-initial term: After the initial one-year term, while the Agreement continues on a month-to-month basis, either party may terminate upon sixty (60) days written notice with no early termination fee.
Upon termination, Consultant shall be entitled to compensation for services properly performed up to the effective date of termination. All Provider-owned equipment shall be returned within ten (10) business days of termination per Section 9 of Exhibit "A."
7. Ownership of Documents
The City acknowledges the Consultant's documents, including electronic files, as the work papers of the Consultant and instruments of professional service. All compliance documentation, security policies, network documentation, and other written deliverables prepared by Consultant for the City under this Agreement shall become the property of the City upon payment. Consultant shall provide such materials to City within three (3) days after written request.
Consultant retains the right to reuse component methodologies, frameworks, and general design concepts on other engagements.
8. Licensing of Intellectual Property
This Agreement creates a nonexclusive and perpetual license for City to copy, use, modify, and reuse all documents and data prepared by Consultant under this Agreement. Consultant represents and warrants it has the legal right to license all such materials. Consultant shall require all subcontractors to agree in writing that City is granted equivalent rights to subcontractor-prepared materials.
9. Confidentiality
All ideas, memoranda, specifications, plans, security documentation, network data, written information, and other materials created by or provided to Consultant in connection with this Agreement shall be held confidential by Consultant. Such materials shall not be used for any purpose other than performance of services under this Agreement, nor disclosed to any person not connected with such performance, without prior written consent of City.
This obligation survives termination.
10. Consultant's Books and Records
Consultant shall maintain all ledgers, invoices, records, and documents evidencing charges, expenditures, and services under this Agreement for a minimum of three (3) years from the date of final payment, or longer as required by law. All such records shall be made available for inspection during regular business hours upon written request by the City Manager, City Attorney, City Finance Director, or their designated representative.
11. Independent Contractor
Consultant, in the performance of services hereunder, shall act as and be an independent contractor and shall not act as an agent or employee of the City. Consultant shall obtain no rights to retirement benefits or other benefits which accrue to City employees, and Consultant expressly waives any claim to such rights.
12. Data Ownership
All data, records, files, and information owned by or belonging to the City of Marysville shall remain the sole property of the City at all times. Consultant makes no claim of ownership over any City data accessed, managed, or processed in the course of delivering services. Upon termination, Consultant shall return or destroy City data in its possession in accordance with the City's instructions and applicable law.
13. Professional Ability of Consultant
City has relied upon the professional training and ability of Consultant to perform the services hereunder. All services shall be performed by Alliant Networking Services, Inc. in accordance with applicable legal requirements and shall meet the standard of quality ordinarily expected of competent professionals in Consultant's field of expertise.
14. Compliance with Laws — Including CJIS
Consultant shall use the standard of care in its profession to comply with all applicable federal, state, and local laws, codes, ordinances, and regulations. Consultant specifically acknowledges its obligations under the FBI CJIS Security Policy as they apply to systems and data within its management scope, and shall maintain current background check clearances for all personnel with access to CJI-adjacent systems.
15. Licenses and Insurance
Consultant represents and warrants that it has all licenses, permits, qualifications, insurance, and approvals legally required to practice its profession and shall maintain such throughout the term of this Agreement. Insurance requirements are set forth in Exhibit "B."
16. Declined Security Safeguards
If City declines a security safeguard, control, or upgrade recommended in writing by Consultant, Consultant shall document the declination. Consultant is expressly released from liability for any incident reasonably attributable to the declined safeguard. Written declinations shall be signed by the City's authorized contact.
17. Notices
Any notice required under this Agreement shall be in writing and either served personally or sent prepaid first-class mail. Notice shall be deemed communicated within 48 hours of mailing.
If to City: City of Marysville · 526 C Street · Marysville, CA 95901 · Attn: Jim Schaad If to Consultant: Alliant Networking Services, Inc. · 1521 Starr Dr. Suite C · Yuba City, CA 95993 · Attn: Jason Gretsch
18. Entire Agreement & Amendments
This Agreement, together with Exhibit "A" and Exhibit "B," constitutes the complete and exclusive statement of Agreement between the City and Consultant, superseding all prior agreements including the Agreement dated July 1, 2024. This Agreement may be modified only by a written document executed by both parties and approved as to form by the City Attorney.
19. Assignments and Subcontracting
Assignments of any rights, duties, or obligations under this Agreement require prior written consent of City.
Consultant may engage vetted subcontractors — including certified penetration testing firms and security specialists — with prior written authorization from City. All subcontractors shall be bound by confidentiality obligations equivalent to those in this Agreement, and any subcontractor with access to CJI-adjacent systems must meet applicable CJIS background check requirements. Consultant remains fully responsible for all subcontracted work.
20. Non-Solicitation
During the term and for twelve (12) months following termination, City agrees not to directly hire or solicit employment of Consultant personnel involved in servicing City without prior written consent. If breached, City agrees to pay a placement fee equal to six (6) months of the affected employee's annual compensation.
21. General Provisions
Waiver: Waiver of a breach shall not constitute a continuing waiver of subsequent breach. Severability: If any term is held unenforceable, remaining provisions continue in full force. Controlling Law and Venue: This Agreement is governed by the laws of the State of California; any action shall be held exclusively in a state court in the County of Sutter. Litigation Expenses: The prevailing party in any legal action is entitled to recover reasonable litigation expenses including attorney's fees. Force Majeure: Consultant is not liable for delay caused by events beyond reasonable control including natural disasters, utility failures, internet outages, or widespread cyber incidents. Equal Opportunity Employment: Consultant shall not discriminate against any subcontractor, employee, or applicant on the basis of race, religion, color, national origin, disability, sex, or age. Authority to Enter Agreement: Each party warrants that individuals signing this Agreement have the legal power and authority to bind their respective organizations. Cyber Insurance: Consultant recommends City maintain appropriate cyber liability insurance.
Consultant does not provide insurance and is not responsible for uninsured losses.
SIGNATURES & ACCEPTANCE
IN WITNESS WHEREOF, the parties have caused this Agreement to be executed as of the date first written above.
CITY OF MARYSVILLE
By (Signature)
Jim Schaad, City Manager
Date
ALLIANT NETWORKING SERVICES, INC.
By (Signature)
Jason Gretsch, President
Date
Approved as to Form
[City Attorney Name], City Attorney
Attest
City Clerk
Business License / Tax ID
Business License #
Tax ID No.
Attachments: Exhibit A — Scope of Services · Exhibit B — Insurance Requirements Exhibit "A"
Scope of Services — Managed Technology, Cybersecurity & Virtual CIO Services
OVERVIEW
Alliant Networking Services, Inc. shall provide a comprehensive managed technology and cybersecurity services program for the City of Marysville covering all city facilities and departments including City Hall, Police Department, Finance & Utilities, Public Works, and Waste Water Treatment Plant, effective July 1, 2026. The Fire Station is not included in this Agreement effective July 1, 2026.
IT 1. Managed IT Services
Unlimited support — all covered facilities and staff
Consultant shall deliver comprehensive day-to-day IT support and management for all covered city facilities, departments, and personnel.
Covered Facilities
City Hall — City Administration, Finance & Utilities, Public Works Police Department — including patrol laptops, dispatch, and CLETS-connected systems Waste Water Treatment Plant
Support Services — Unlimited
Unlimited phone support during business hours (Mon–Fri, 8:00 AM–5:00 PM) Unlimited remote control support during business hours
Unlimited on-site support as needed within response time commitments Helpdesk troubleshooting for all covered staff and devices Support for Microsoft Office applications (Word, Excel, Outlook, Teams) Support for other software suites with software vendor support User account administration and permissions management across the network Vendor coordination and third-party technology management Systems Management
Maintain all computer network infrastructure and documentation Patch management and security updates for all servers and workstations System monitoring, alerting, and proactive remediation via Datto RMM Server performance monitoring — event logs, drive space, availability Workstation management including moves and hardware upgrades (parts not included) Software license management and new application installations Asset lifecycle management, reporting, and project planning Network infrastructure maintenance — firewall, switches, connectivity VPN administration and fiber connectivity between sites Documentation and operational continuity via IT Glue
Purchasing assistance for equipment and technology
Public Safety — 24/7 Support
Police Department shall receive 24/7/365 support for critical systems After-hours support (outside Mon–Fri 8:00 AM–5:00 PM) billed separately at $350/hour with one (1) hour minimum All Police Department requests involving CLETS, CAD, or active law enforcement operations treated as Critical priority PLATFORMS Datto RMM IT Glue AutoTask
CS 2. Cybersecurity Platform
24/7 managed protection across all layers
Consultant shall implement, monitor, and maintain a comprehensive layered cybersecurity platform aligned with NIST CSF and CJIS Security Policy requirements.
24/7 endpoint detection and response (EDR/MDR) monitoring and managed analyst response Email security, advanced threat protection, anti-phishing, and compliance archiving Security Information and Event Management (SIEM) — centralized log collection, correlation, and alerting Cloud application monitoring and SaaS threat alerting — integrated with SIEM Cloud application data backup and independent recovery
Vulnerability scanning — internal and external, risk-scored with tracked remediation (newly included effective July 1, 2026; deployed in advance of this agreement for network assessment and Provider liability coverage purposes) Security awareness training and phishing simulation for all city staff — CJIS PA 7 and PA 12 Identity and multi-factor authentication management — M365, Duo Security, RSA hardware tokens Network edge security and firewall administration — Barracuda Firewall Secure remote access administration — NetMotion VPN for patrol laptops Administer and maintain computer network security policy PLATFORMS RocketCyber EDR/MDR Kaseya SIEM K365 SaaS Alerts Kaseya VulScan BullPhish ID Barracuda Firewall Barracuda Email Security Barracuda Email Archiving M365 MFA Duo Security RSA Tokens NetMotion VPN
BK 3. Backup & Business Continuity (BCDR)
Immutable, ransomware-proof recovery capability
Consultant shall administer and monitor a comprehensive backup and disaster recovery program aligned with the City's formally adopted Business Continuity Plan.
Immutable, ransomware-resistant image-based backups of all servers and critical systems Automated nightly backup verification via Datto screenshot technology Cloud application data backup — email, SharePoint, OneDrive — independent of Microsoft retention Rapid system recovery and instant virtualization capability Recovery Time Objective (RTO) of 2 hours for Police Department and CLETS systems Monitoring of backup health with same-business-day notification of failures Business continuity support during system outages or cyber incidents PLATFORMS Datto BDR K365 SaaS Backup
M3 4. Microsoft 365 GCC Licensing & Administration
Government Community Cloud — CJIS-compliant platform
Licensing management and ongoing administration for Microsoft 365 Government Community Cloud (GCC) User provisioning, account management, and licensing optimization Microsoft 365 MFA configuration and compliance administration Email administration — infrastructure management and end-user support Support for Microsoft 365 applications including Outlook, Word, Excel, Teams, SharePoint, and OneDrive vC 5. Virtual CIO Services
Strategic IT advisory — new in this agreement
Alliant Networking Services formally assumes the role of Virtual Chief Information Officer (vCIO) for the City of Marysville, formalizing strategic IT advisory services provided informally since 2015.
Annual Technology Roadmap: Formal annual roadmap documenting system state, end-of-life hardware and software, projected costs, and recommended investments — suitable for council budget presentations Quarterly Business Reviews: Formal meetings with city leadership no fewer than four times per year — security program status, compliance posture, upcoming needs, and technology trends Compliance Documentation: Maintenance and update of BCP, CJI Access Control Matrix, CJIS Personnel Security Register, and related security policies
Quarterly CJIS Access Reviews: Validation of all CJI system access, signed compliance record delivered to Police Chief and TAC each quarter
Annual BCP Tabletop Exercise: Facilitated disaster recovery exercise with city leadership — satisfies NIST and CJIS testing requirements
Technology Policy Ownership: Authoring and maintaining city technology policies including AI Acceptable Use Policy and incident response procedures
Quarterly Technology Trends Briefing: Written briefing to city leadership on relevant government technology and cybersecurity developments
SL 6. Service Levels & Response Times
Response targets — not guaranteed resolution times
Consultant will use commercially reasonable efforts to respond within the following timeframes. Business hours are Monday–Friday, 8:00 AM–5:00 PM Pacific, excluding City-observed holidays.
PRIORITY DEFINITION EXAMPLES RESPONSE TARGET
Critical System outage or active
security event
Ransomware, CLETS down,
network outage, active breach
1 business hour
24/7 for confirmed security events
PRIORITY DEFINITION EXAMPLES RESPONSE TARGET
High Significant operational
impairment
Department outage, email
down, VPN failure
2 business hours
Standard Individual issue, moderate
impact
Single user issue, account
lockout, software error
Same business day
Low Minor issue or non-urgent
request
General questions, minor
changes, non-urgent requests
Next business day
Police Department priority: All PD requests involving CLETS, CAD, patrol laptops, or active law enforcement operations are treated as Critical regardless of issue type. $$ 7. Service Fees & Billing
Monthly flat fee — billed in advance
SERVICE CATEGORY MONTHLY FEE
Managed IT Services $9,600.00
Cybersecurity Platform $4,250.00
Backup & Business Continuity (BCDR) $3,338.44
Microsoft 365 GCC Licensing $2,709.00
Total Monthly Investment $19,897.00
One-year term with no annual escalator; month-to-month thereafter at the same rate unless a new agreement is executed
After-hours / emergency support: $350/hour with 1-hour minimum Security incident response (extended): $175/hr business hours · $350/hr after-hours Project work and Additional Services: quoted separately in writing prior to commencement Off-boarding / transition services: $175/hr business hours · $350/hr after-hours Quarterly True-Up
Fees are based on supported users, devices, and systems at execution. Consultant shall conduct a quantity review every ninety (90) days and may adjust fees to reflect material increases in users, devices, servers, storage, or locations. City shall receive fifteen (15) days written notice prior to any adjustment.
Equipment Ownership
All hardware, firewall appliances, backup devices, and monitoring equipment provided by Consultant remains the sole property of Alliant Networking Services, Inc. Equipment must be returned within ten (10) business days of termination in reasonable working condition.
EX 8. Project Work Exclusions
Quoted separately — not included in monthly fee
✔ Included in Monthly Fee
All platform monitoring and management
Routine support and troubleshooting
Patch management and remediation
Security alert investigation and response
Compliance documentation maintenance
Quarterly vCIO business reviews
Annual BCP tabletop exercise
Quarterly CJIS access reviews
M365 GCC licensing administration
✗ Quoted Separately (Project Work)
Server replacements or hardware migrations
Office moves or new location buildouts
Network redesign or major infrastructure changes
Major cloud migrations or new platform deployments
Penetration testing engagements
Extended compliance audit preparation
After-hours and emergency support
Security incident response (extended)
Off-boarding and transition services
Any tasks or requests not within the above Scope of Services shall be considered project work and billed separately upon a written not-to-exceed price approved by City in advance.
Exhibit "B"
Insurance Requirements
Consultant shall procure and maintain for the duration of this Agreement insurance against claims for injuries to persons or damages to property which may arise from or in connection with the performance of work hereunder.
Consultant shall maintain limits no less than:
Commercial General Liability
Including Premises & Operations, Contractual Liability, Personal Injury, Independent Contractors, Bodily Injury, Property Damage
$2,000,000 per occurrence
$2,000,000 general aggregate
Automobile Liability
Owned, Non-Owned, and Hired Autos — Bodily Injury
and Property Damage
$1,000,000 per accident
Workers' Compensation
As required by the State of California
Statutory limits
Employer's Liability
Bodily injury or disease
$1,000,000 per accident
Professional Liability (Errors & Omissions)
Claims arising from professional services including technology consulting, cybersecurity, and managed services. If written on a claims-made form, retroactive date must precede agreement effective date and coverage must be maintained for five (5) years post-completion.
$1,000,000 per claim · $2,000,000 annual aggregate
Additional Insurance Requirements
Any deductibles or self-insured retentions must be declared to and approved by the City The City, its officers, officials, employees, and volunteers shall be named as additional insureds on Commercial General Liability and Automobile Liability policies
Consultant's insurance coverage shall be primary as respects the City; any City insurance shall be excess and noncontributing Each policy shall be endorsed to provide thirty (30) days prior written notice of cancellation to the City Insurance shall be placed with insurers rated no less than A:VII by A.M. Best Workers' Compensation policy shall include waiver of subrogation in favor of the City Consultant shall furnish City with original certificates and endorsements prior to commencement of services Alliant Networking Services, Inc. · 1521 Starr Dr. Suite C, Yuba City, CA 95993 · (530) 673-3945 · alliantnetworking.com Agreement for Professional Services | City of Marysville | Effective July 1, 2026 | Confidential