Dakota County Logo
File #: DC-1570    Version: 1
Type: Consent Action Status: Passed
File created: 10/25/2022 In control: Board of Commissioners
On agenda: 11/15/2022 Final action: 11/15/2022
Enactment date: 11/15/2022 Resolution #: 22-490
Title: Authorization To Execute Contract With NetSPI To Perform Security Audit On Dakota County's Internal, External And Cloud Environments
Sponsors: Information Technology
Attachments: 1. PENTEST Vendors
Related files: DC-1784
DEPARTMENT: Information Technology
FILE TYPE: Consent Action

TITLE
title
Authorization To Execute Contract With NetSPI To Perform Security Audit On Dakota County's Internal, External And Cloud Environments
end

PURPOSE/ACTION REQUESTED
Authorize contract with NetSPI to perform security audit on Dakota County's internal, external and cloud environments.

SUMMARY
Due to the increased need to validate complete protection of Dakota County Networks, the Information Technology Department desires to contract with a third party to perform an extensive security audit on the entire network. The consultant will also be conducting specialized reviews of the new cloud systems as well as reviewing standard workstation and laptop deployments.

A request for proposal was posted on the county website from September 16, 2022 through October 14, 2022. The County received 23 responses (Attachment).

NetSpi has been selected as having the best response. They stood out above other respondents in their ability to perform a review of the cloud (M365) environment and perform a detailed evaluation of configuration settings on workstations and laptops used throughout our environment.

RECOMMENDATION
recommendation
Staff recommend the County Board authorize a contract with NetSPI in the amount of $99,877.75 to conduct security audit testing for the County.
end

EXPLANATION OF FISCAL/FTE IMPACTS
There is sufficient budget within Information Technology from previous year project carryover.

? None ? Current budget ? Other
? Amendment Requested ? New FTE(s) requested

RESOLUTION
body
WHEREAS, due to the increased need to validate complete protection of Dakota County Networks; and

WHEREAS, the Information Technology Department needs to contract with a 3rd party to perform an extensive security audit on the entire network; and

WHEREAS, a request for proposal was advertised from September 16, 2022 through October 14, 202...

Click here for full text