City Council Staff Report Page 1 of 3 May 26, 2026
Staff Report
Agenda Item No. 4.7
DATE: May 26, 2026
TO: Honorable Mayor and Members of the City Council
FROM: Joan Malloy, City Manager
SUBJECT: Adopt a Resolution Authorizing the City Manager to Execute a Three-Year Service Agreement with ePlus Technology, Inc., in the Amount not to Exceed $180,684.00 for Cyber-Security Monitoring Services and Incident Response
EXECUTIVE SUMMARY
Staff recommends that the City Council approve a three-year service agreement with ePlus Technologies, Inc., to address the City's critical cybersecurity needs and ensure the protection of our technology infrastructure and data.
STRATEGIC PLAN ALIGNMENT
This agreement supports Goal D.: Create a healthy, sustainable community and maintain and improve the City infrastructure.
Strategy 2 (New 2021): Enable a robust cybersecurity and information technology disaster recovery service.
BACKGROUND
In September 2019, the City experienced a virus attack that affected software, data, and multiple computer systems across the organization. To respond quickly, the City entered into a short-term agreement with Kroll Associates, Inc., for forensic analysis and virus containment.
In November 2019, the City entered into a one-year agreement with Kroll Associates, Inc. for 24/7 endpoint monitoring and remediation services provided through Kroll and its subcontractor, Red Canary, using Carbon Black Response and Defense software. This agreement was renewed in 2020 and 2021. In both 2022 and 2024, the City renewed the service for an additional two-year term.
In 2025, the City was notified that Kroll Associates and Red Canary would be ending their partnership. Because Red Canary provided the 24/7 security monitoring component, this change required the City to evaluate alternative cybersecurity monitoring solutions to Agenda Item No. 4.7
City Council Staff Report Page 2 of 3 May 26, 2026
ensure uninterrupted protection of the City’s technology infrastructure.
DISCUSSION
The City currently contracts with Kroll/Red Canary for a 24/7 Security Operations Center (SOC) to monitor the computer environment and automatically respond to potential threats. To ensure broader visibility and improved protection of the City’s systems, staff evaluated vendors capable of monitoring both devices and the network infrastructure.
Following a review of multiple vendors and pilots, City staff selected Adlumin, provided through the security reseller ePlus, to strengthen the City’s cybersecurity posture.
Adlumin (N-Able) is a Managed Security Service Provider (MSSP) offering an integrated security platform with advanced analytics, strong monitoring capabilities, and extensive visibility across critical cybersecurity tools and services.
Adlumin’s services will benefit Union City in the following ways:
Enhancing operational efficiency by providing a centralized platform to review all cybersecurity activity and alerts.
Reducing risk by leveraging Adlumin’s dedicated security team to detect threats and notify City staff quickly.
Increasing confidence in the City’s security posture through consistent monitoring, incident tracking, and documented response processes.
Supporting regulatory compliance, including CJIS, PCI-DSS, and NIST requirements.
Improving overall visibility and detection capabilities through Adlumin’s AI-driven analytics, machine learning, and enterprise security tools.
The agreement with ePlus includes Adlumin’s AI-powered XDR security platform, incident response support, log retention services, ransomware protection, and 24/7 SOC coverage for up to 360 user accounts. The agreement is a cooperative agreement through the National Association of State Procurement Officials (NASPO) under Master Contract Number AR2472.
FISCAL IMPACT
The $60,228.00 yearly cost of this service agreement was added and approved in the FY 2025-2026 budget. As there are sufficient funds budgeted to cover the cost of this service agreement, there will be no fiscal impact to the FY 2025-2026 Adopted Budget.
RECOMMENDATION
Staff recommends that the City Council adopt a resolution authorizing the City Manager to execute a three-year service agreement with ePlus Technology, Inc., in the amount not to exceed $180,664 for Cyber-Security Monitoring Services and Incident Response.
Agenda Item No. 4.7
City Council Staff Report Page 3 of 3 May 26, 2026
Prepared by: Mario Vallejo, Director of Information Technology Submitted by: Mario Vallejo, Director of Information Technology Attachments
1. ePlus Adlumin Service Proposal
2. Draft Resolution