File #: A 19-279    Name: Qualys Amendment No. 3
Type: BoS Agreement Status: Passed - Information Technology Department
File created: 7/1/2019 In control: Board of Supervisors
On agenda: 7/16/2019 Final action: 7/16/2019
Title: Approve and authorize the Contracts Purchasing Officer or his designee, to execute Amendment No. 3 to the Non-Standard Agreement with Qualys, Inc. on behalf of the Information Technology Department, adding $130,645.00 to the existing contract amount of $391,935, for an amended total of $522,580, to continue to provide QualysGuard Vulnerability Management Enterprise services, and to extend the term of the agreement by an additional year, ending on July 19, 2020.
Attachments: 1. Board Report, 2. Qualys Amendment No. 3, 3. Qualys Amendment No. 2, 4. Qualys Amendment No. 1, 5. Qualys Agreement, 6. Item No. 21 Completed Board Order
Related files: A 23-310
Title
Approve and authorize the Contracts Purchasing Officer or his designee, to execute Amendment No. 3 to the Non-Standard Agreement with Qualys, Inc. on behalf of the Information Technology Department, adding $130,645.00 to the existing contract amount of $391,935, for an amended total of $522,580, to continue to provide QualysGuard Vulnerability Management Enterprise services, and to extend the term of the agreement by an additional year, ending on July 19, 2020.
Report
RECOMMENDATION:
Approve and authorize the Contracts Purchasing Officer or his designee, to execute Amendment No. 3 to the Non-Standard Agreement with Qualys, Inc. on behalf of the Information Technology Department, adding $130,645.00 to the existing contract amount of $391,935, for an amended total of $522,580, to continue to provide QualysGuard Vulnerability Management Enterprise services, and to extend the term of the agreement by an additional year, ending on July 19, 2020.

SUMMARY/DISCUSSION:
Qualys, Inc. (Qualys) has provided information security vulnerability, identification, and remediation system management services for the County's use for the past thirteen years. The Qualys tool has provided the Information Technology Department (ITD) with on-demand ability to scan County Information Technology (IT) assets for information security vulnerabilities immediately, which assists in the County's ability to proactively remediate them to protect County information assets against attack. ITD wishes to continue service through fiscal year 2019-20.

ITD has utilized the QualysGuard scanning tool and service to assist identifying vulnerabilities, which is a weakness in a system that may allow an attacker to violate the confidentiality, integrity, availability, or audit mechanism of a system or the data and applications it hosts. Vulnerabilities often result from 'bugs' or design flaws in a system. The Qualys tool provides the County with the results of such scans, including detailed repor...

Click here for full text