05-11-2020 BPU RPT 06 - Laserfiche WebLink

Home

W A T E R E N E R G Y L I F E RIVERSIDE PUBLIC UTILITIES Board Memorandum P U B L I C U T I L I T I E S BOARD OF PUBLIC UTILITIES DATE: MAY 11, 2020 ITEM NO: 6 SUBJECT: PROFESSIONAL CONSULTANT SERVICES AGREEMENT WITH AESI, INC. FOR RFP 1966 FOR CYBER SECURITY IN THE AMOUNT OF $270,960 FOR A TERM OF THREE YEARS ISSUE: Approve a Professional Consultant Services Agreement for RFP 1966 with AESI, Inc., for cyber security consulting services for a three-year term in the amount of $270,960, to include items such as a cyber program assessment, cyber posture assessment, vulnerability assessment services, penetration testing services, remediation services, incident response services, training services, mentoring services, and exercise services. RECOMMENDATIONS: That the Board of Public Utilities: 1. Approve a Professional Consultant Services Agreement with AESI, Inc. for RFP 1966 for cyber security consulting services as set forth in Exhibit A of the agreement, in an amount not -to -exceed $270,960 for a three-year term. 2. Authorize the City Manager, or designee, to execute the agreements, including making minor non - substantive changes, and to sign all documents and instruments necessary to complete the transactions. BACKGROUND: The ability to provide and support comprehensive cyber security protection across Riverside Public Utilities (RPU) is essential for maintaining a secure and robust cyber environment. The rapid and ever-changing threat landscape in the utility sector can only be mitigated if RPU utilizes every resource available in order to keep its Operational Technology systems and environments at a maximum protection level. In 2019, based on discussions and needs between the City of Riverside Innovation and Technology (IT) Department and Riverside Public Utilities, Cyber Security Professional Consulting Services Request for Proposal (RFP) 1966 was developed. RFP 1966 sought a qualified vendor to perform a comprehensive review of RPU's Operational Technology network architecture, security controls, policies, facilities, and systems to identify gaps in and mitigation solutions for Critical Infrastructure Protection. The cyber security services requested in RFP 1966 requires an approach that is both modular and capable of maintenance by City of Riverside (City) personnel. This effort is to ensure that the City maintains a strong and consistent cyber security posture. This project will include: