June 27, 2023
Information Technology
DATE: June 27, 2023
TO: Mayor Martinez and Members of the City Council
FROM:
Sue Hartman, Director of Information Technology
Subject:
First Amendment to the Agreement with Maze and
Associates for Continued Cyber Security Awareness
Training
FINANCIAL IMPACT: Funding in the amount of $17,790. is allocated from the Information Technology operating budget (account
01261017 400209).
PREVIOUS COUNCIL
ACTION:
June 30, 2020
STATEMENT OF THE
ISSUE:
The original contract agreement with Maze and
Associates for cyber security awareness training expiring June 29, 2023. The City is in need of continued
cybersecurity awareness training for City staff and is
requesting approval of the first amended agreement for
such services.
RECOMMENDED ACTION:
APPROVE a first contract amendment with Maze and
Associates in the amount of $17,790, for a total contract amount not to exceed $39,865.20, for continued cyber
security awareness training, with a term extending
through June 30, 2025 – Information Technology
Department (Sue Hartman 510-620-6874).
AGENDA
REPORT
June 27, 2023
DISCUSSION:
Cybercrime continues to be a massive global problem. Many cyber-attacks are successful due to individual staff members unknowingly and inadvertently allowing infiltration of our systems. Some of the most negative consequences include theft of confidential information (social security numbers, credit card numbers, and the like) and installation of ransomware. Many cities have spent millions of dollars in ransom where the cybercriminal extorts money to secure the release of data. These amounts do not calculate the disruption in service delivery to the community. As more agencies pay the ransom, it becomes increasingly likely it will be an ever-increasing crime.
Training all City staff to help the City of Richmond thwart cyber-attacks is a key component of our overall security. Maze and Associates will continue to help the City of Richmond deploy KnowBe4 that will be used to help City staff understand today’s hostile IT landscape and mitigate the impacts of those attacks. By simulating phishing attacks on end users, KnowBe4 trains users to proactively identify threats.
The recommended action is to approve a first contract amendment with Maze and Associates in the amount of $17,790.00, for a total contract amount not to exceed $39,865.20, for continued cyber security awareness training, with a term extending through June 30, 2025.
DOCUMENTS ATTACHED:
Attachment 1 – Original Contract
Attachment 2 – Maze and Associates Contract Amendment 1