Title
WITHDRAWN - Recommendation to Authorize the Interim City Manager to Purchase Darktrace Enterprise Immune System for a 3-Year Amount Not to Exceed $292,248 to be Paid Annually at $97,416. (Information Technology 60626070) [Will be considered on 7/12/22-Item 5-F]
Body
To: Honorable Mayor and Members of the City Council
EXECUTIVE SUMMARY
Staff is requesting City Council approval of the purchase of the Darktrace Enterprise Immune System (hereinafter referred to as "Darktrace"). To increase the City of Alameda’s (City) internal network systems’ security posture, Darktrace would be used to monitor the entire network for anomalous security-related activity.
BACKGROUND
The City has numerous perimeter-based security solutions to protect the City from cybersecurity attacks outside of our network. Currently, the City does not have the same protections or visibility if an attacker is able to get into the internal network. Once in the internal network, attackers could be able to move laterally without detection of their malicious activity. Staff is recommending this holistic solution to provide security on all fronts both internally and externally.
DISCUSSION
Internal networks are sometimes compromised through phishing emails or if users introduce infected USB drives to the network. Once inside the network, attackers are able to conceal their activity as we lack any solution that provides such monitoring. With Darktrace, it will not only alert administrators to anomalous behavior but will also take action on any malicious activity in an automated fashion or by way of Darktrace's own 24x7x365 security operations center (SOC.)
With cybersecurity attacks on the rise, it is in the City’s best interest to implement a security solution like Darktrace that is capable of identifying current threats and more importantly, agile enough to respond to new ones as they emerge.
Alameda Municipal Power implemented Darktrace in early 2022 and has been very impressed with its detection capabilities; therefore, staff requests City Council approve the purchase of Darktrace for 3-years, amount not to exceed $292,248 to be paid annually at $97,416.
ALTERNATIVES
• Do not authorize the purchase Darktrace
• Rely on perimeter-based security & monitoring and accept security risks of a compromised internal network.
FINANCIAL IMPACT
The total cost of Darktrace for 3-years is $292,248 to be paid annually at $97,416. The funds for this contract are included in the Fiscal Year 2022-23 budget for the Information Technology Internal Service Fund (606).
Year |
Amount |
Year 1 |
$97,416 |
Year 2 |
$97,416 |
Year 3 |
$97,416 |
TOTAL: |
$292,248 |
MUNICIPAL CODE/POLICY DOCUMENT CROSS REFERENCE
This purchase complies with sections 2-61.7 (Joint Purchases with Public Agencies) of the Alameda Municipal Code.
ENVIRONMENTAL REVIEW
The California Environmental Quality Act (CEQA) applies only to projects that have the potential for causing a significant effect on the environment. This action is not a project pursuant to Public Resources Code section 21065 and CEQA Guidelines section 15378.
CLIMATE IMPACT
There are no identifiable climate impacts or climate action opportunities associated with the subject of this report.
RECOMMENDATION
Authorize the Interim City Manager to purchase Darktrace Enterprise Immune System for 3-years, in an amount not to exceed $292,248 to be paid annually at $97,416.
Respectfully submitted,
Carolyn T. Hogg, Information Technology Director
By,
Demetrius Cagampan, Information Technology Manager
Financial Impact section reviewed,
Margaret O’Brien, Finance Director
Exhibits:
1. Quote
2. Darktrace Business Case document
cc: Dirk Brazil, Interim City Manager