TO: Board of Supervisors
FROM: Meg Ragan, Chief Technology Officer – Information Technology Services
REPORT BY: Julia Bordona, Staff Services Manager
SUBJECT: Budget Amendment and Waiver of Competitive Bidding requirements for the Purchase of Security Platform
/
RECOMMENDATION
title
Approve a Budget Amendment to increase appropriations by $250,000 for the purchase of Security Platform and related implementation, offset by available fund balance; and approve a waiver of competitive bidding requirements and sole source award. (Fiscal Impact: $250,000 Expense; Information Technology Services Fund; Not Budgeted; Discretionary)
[4/5 Vote Required]
body
BACKGROUND
Napa County Information Technology Services (ITS) is responsible for supporting and protecting the County's enterprise technology environment, including systems that manage sensitive, confidential, financial, health, and criminal justice information. As the County's technology environment continues to evolve, maintaining effective security controls requires an ongoing investment in the processes, technologies, and governance practices used to manage access to County systems and information.
Recent independent assessments conducted under multiple regulatory and cybersecurity frameworks, including HIPAA Privacy and Security, Criminal Justice Information Services (CJIS), Payment Card Industry (PCI), and the National Institute of Standards and Technology (NIST) Cybersecurity Framework, have provided valuable insight into opportunities to further strengthen the County's enterprise security posture. A common theme across these assessments was the importance of advancing identity governance capabilities to support consistent oversight, periodic access reviews, documentation, and reporting across enterprise and departmental systems.
The County currently maintains established identity and access management controls across its technology environment. These controls have evolved alongside individual systems, depa...
Click here for full text