TO: HONORABLE MAYOR AND MEMBERS OF THE CITY COUNCIL
FROM: Diego Chavez, Administrative Services Director
PREPARED BY: Diane Kohanyi, Management Analyst - IT
SUBJECT:
title
Approval of Subscription with Blumira for Cybersecurity Software and Monitoring Services
end
ABSTRACT
The City of Murrieta experienced a cybersecurity incident in 2022. In response, the City initiated efforts to strengthen its cybersecurity posture, including implementing Blumira, an integrated cybersecurity and monitoring platform. Blumira consolidates multiple security functions into a single system, reducing complexity and costs compared to managing several separate platforms. Following a successful first year of use, the City Council approved a three (3) year renewal on June 20, 2023. Staff recommends continuing the Blumira subscription for another three (3) years to maintain a strong defense against evolving cybersecurity threats.
RECOMMENDATION
recommendation
Approve a three (3) year subscription for cybersecurity software and monitoring services with Blumira, Inc. through CyberTech Analytics in an amount not-to-exceed $270,150;
Accept the Blumira, Inc., terms and conditions;
Authorize exemption from current bidding requirements in accordance with Municipal Code Section 3.08.280.I.; and
Authorize the City Manager to execute related orders, renewals, amendments, and administrative changes necessary to maintain the service, provided the total cost does not exceed the approved budget authority.
body
PRIOR ACTION/VOTE
On June 20, 2023, the City Council approved a three (3) year agreement for Blumira for cybersecurity software and monitoring (4-0-1).
STRATEGIC ALIGNMENT
This item aligns with the City Council goal of providing a high level of innovative public safety relating to an administrative priority.
DISCUSSION
In 2022, the City of Murrieta (City) suffered a cybersecurity incident that disrupted operations. Following this incident, the Information Technology (IT) division made efforts to improve the City’s cybersecurity posture, procedures, systems, and responses to ensure that the City does not suffer a similar incident in the future. One of those improvements was the deployment of the Blumira cybersecurity platform.
On July 27, 2022, the City Manager approved a one (1) year contract with Blumira for cybersecurity services, including endpoint monitoring. On June 20, 2023, the City Council approved a three (3) year subscription with Blumira. IT staff continues to be impressed with Blumira’s ability to detect threats and recommends continuing the service for another three (3) years for an amount not to exceed $270,150 (Attachments 1 and 2).
The service satisfies the City’s procurement code and policy, allowing it to be exempt from bidding requirements. Per Municipal Code Section 3.08.280.I. Exceptions to competitive bidding requirement, the competitive provision does not apply to purchases and contracts involving information technology supplies, equipment and services. Blumira’s product is unique because it provides several cybersecurity functions in a single robust platform, allowing staff to gain broad visibility into systems and manage security alerts in a single location. It is common for these functions to be split across several different platforms, requiring multiple systems to be managed.
PUBLIC NOTICING
The agenda item has been noticed according to the Brown Act (72 hours in advance of the meeting at which the City Council considers the item).
FISCAL IMPACT
The cost for this service is approximately $17.45 per user and per month for a term of 36 months. The total one (1) year cost is $90,050, for each year of the term. The total three (3) year term is $270,150. This cost is calculated based on 430 users, in addition to 600 endpoint agent licenses. This item is being funded and budgeted from account code 726830-62160 within the Information Technology Operating Fund.
ATTACHMENTS
ATT 1 - CyberTech Analytics Quote
ATT 2 - Blumira Terms and Conditions