CITY OF MENIFEE
SUBJECT: Agreement Amendment with CSD Cyber, LLC. for
Cybersecurity Penetration Testing Services
MEETING DATE: February 19, 2025
TO: Mayor and City Council
PREPARED BY: Damien Greathouse, Cybersecurity Manager Ross Sublett, Management Analyst
REVIEWED BY: Michelle Sarkissian, Acting IT Director
APPROVED BY: Armando G. Villa, City Manager
-------------------------------------------------------------------------------------------------------------------------------
RECOMMENDED ACTION
1. Approve and authorize the City Manager to execute Amendment No. 1 to the Professional Services Agreement with CSD Cyber, LLC. for cybersecurity penetration testing services, increasing the compensation amount by $3,731.80, for a total not-to-exceed amount of $28,571.80.
DISCUSSION
The City of Menifee Information Technology Department (“IT Department”) oversees all Citywide cybersecurity solutions and ensures safety from cyber-attacks. The user base expansion and growing influence within the City of Menifee (“City”) have significantly heightened security threats.
To keep up with the growth in security threats, the IT Department has initiated third-party cybersecurity testing to ensure that the City is in compliance with Federal Codes such as the National Institute of Standards and Technology (NIST) which is used to keep compliance and understand risk with the proper measures to keep the City safe.
On October 14, 2024, the City entered into a Professional Services Agreement (“Agreement”) with CSD Cybersecurity, LLC. (“Consultant”) in an amount not-to-exceed $24,840. The Agreement was approved under the City Manager’s signing authority pursuant to Menifee Municipal Code Section 3.12.080 to provide cybersecurity penetration testing services.
The Consultant is a cybersecurity firm dedicated to providing top-quality data protection services and tools to ensure business continuity and compliance for its clients. The Consultant offers a range of solutions to safeguard organizations against cyber threats and aims to enhance the security posture of organizations while also enabling them to effectively defend against and
City of Menifee Staff Report
Agreement Amendment No. 1 with CSD Cyber, LLC.
February 19, 2025
2 5
2 5
respond to the evolving landscape of cyber threats. Their ability to find shortcomings in cybersecurity makes them unique and effective in helping companies defend against the constant stream of cyber-attacks that occur every day.
Penetration testing simulates real-world attacks to assess the effectiveness of the City’s security measures, enabling the IT Department to proactively address potential risks. This service is crucial for enhancing the City’s overall cybersecurity posture, ensuring compliance with industry regulations, and safeguarding sensitive data against unauthorized access. By undertaking this rigorous testing, the IT Department aims to validate and strengthen the City’s defenses against potential cyber-attacks.
The proposed Amendment No. 1 would expand the original Agreement’s scope of work to include on-site testing services and increase the project compensation by $3,731.80 for a total not-to- exceed amount of $28,571.80. By providing on-site penetration testing services, the Consultant can provide a more accurate assessment of the City’s security posture by allowing testers to evaluate internal networks, physical security controls, and potential insider threats. This hands- on approach ensures real-time collaboration with the IT Department, minimizes false positives, and enables immediate remediation of vulnerabilities in a controlled environment.
Pursuant to Menifee Municipal Code Section 3.12.090, amendments or change orders in the amount greater than 10% of the contract amount or that exceeds the City Manager’s signing authority shall be approved by the City Council.
STRATEGIC PLAN OBJECTIVE
Safe and Vibrant Community
FISCAL IMPACT
The fiscal impact for the proposed Amendment No. 1 with CSD Cyber, LLC. is $3,731.80 for Fiscal Year 2024/2025. Funding for the proposed amendment is available in the Fiscal Year 2024/2025 budget within the IT Fund in the Operations Division’s Cybersecurity account (1110-ITD-OPER- 651354). No additional budget appropriation action is required.
ATTACHMENTS
1. Amendment No. 1 - CSD Cyber, LLC.
2. Fiscal Year 24/2025 CSD Cyber, LLC. Agreement