Title
Professional Services for Mandatory Payment Card Industry Compliance (Ordinance S-48446)
Description
Request to authorize the City Manager, or his designee, to execute an amendment under Agreement 142524 to authorize a name change and allow payment to RiskSense, Inc. and/or Cyber Security Works, LLC as a result of an assignment. Further request authorization for additional contract term for the agreement for professional services related to the mandatory payment card industry compliance services for the Information Technology Services Department in support of citywide departments. Any remaining funds authorized by previous City Council action will be applied to the extended contract term. Further request to authorize the City Controller to disburse all funds related to this item.
Report
Summary
RiskSense, Inc. provides penetration testing services to ensure compliance with regulatory requirements for Payment Card Industry (PCI) Data Security Standards and Health Insurance Portability and Accountability Act. This service evaluates the efficacy of controls in place to protect the City's systems and data from unauthorized access. This service also helps to ensure the security of the City's network, and failure to continue with penetration testing would result in non-compliance with PCI regulations.
Contract Term
The term of this contract with RiskSense, Inc. will be extended through March 31, 2023.
Financial Impact
There is no financial impact to the City as a result of this request. The contract's aggregate value remains at approximately $1,729,000.
Department
Responsible Department
This item is submitted by Deputy City Manager Inger Erickson and the Information Technology Services Department.