Cities Index.
agenda-report Services Agreement

Ripon City Council
September 13, 2022

Document
agenda-report Services Agreement
Meeting
September 13, 2022
Body
Ripon City Council
Original file
138 KB
Text extracted from the city's file for reading and search. Open the original on riponcityca.iqm2.com. That file is the official record.

City Council
259 N. Wilma Avenue
Ripon, CA 95366
MEMO
To: Honorable City Council
From: Lisa Roos, City Clerk & Finance Director
Date: 09/13/2022
Subject: ResoluteGuard
RECOMMENDED ACTION:

Approve and authorize the Mayor to sign the Services Agreement with ResoluteGuard LLC to provide server review services in the annual not to exceed amount of $4,725, to be paid through the Central San Joaquin Valley Risk Management Authority (funding source: General Operating Fund).

BACKGROUND:

The Central San Joaquin Valley Risk Management Authority (CSJVRMA) is our Joint Powers Authority that provides City liability, property, and workers compensation coverage. In addition to these coverages, the CSJVRMA has a number of optional programs, related to mitigating various risks, that its participants can choose. Recently, CSJVRMA has entered into an Agreement with ResoluteGuard to provide members access to ResoluteGuard’s Cyber-Security Continuous Improvement Platform (Platform) at a reduced price.

DISCUSSION/ANALYSIS:

The Platform will perform internal and external security profile assessments to continuously improve the City’s cyber security posture. With the increase in cyber exposures, public entities being one of the most targeted industries, and the insurance market criteria for cyber coverage becoming more stringent, it is going to be imperative for public entities to increase their controls to protect the City from exposure and ensure the City’s ability to maintain/obtain cyber coverage.

According to the CSJVRMA, this will probably not be an optional program in future years because there will be minimal standards that the City will need to meet to be compliant for insurance purposes.

Within this Platform, ResoluteGuard will identify the vulnerabilities and maximize performance to guide against these risks. They also provide employee training and phishing e-mail training. They do scans of our systems every 90 days to see what has changed to look for ways for improvements. Working closely with our IT Department, they use a Workflow spreadsheet to track information regarding out backups, firewalls, user protection, data protection and the whole network. Based upon the information they find through the scans, they provide action lists of things that need to be done to resolve/minimize the risks. The program is designed for our individual needs based upon the questionnaires we complete when we are on boarded into their system.

FISCAL IMPACT:

Fiscal impact will be $4,725 for fiscal year 2022/2023, to be paid through the Central San Joaquin Valley Risk Management Authority from the General Operating Fund. This amount includes the CSJVRMA’s 5% administrative fee.

Attachments:

1. ResoluteGuard Services Agreement_CSJVRMA with Payment Agreement Attached 9.6.22

← All documents from this meeting