File #: 21-125    Version: 1 Name: Phishing Solution - KnowBe4
Type: Contract Status: Approved
File created: 4/28/2021 In control: City Council
On agenda: 5/11/2021 Final action: 5/11/2021
Title: Communication from the City Manager and Interim Chief Information Officer to APPROVE the SOLE SOURCE Purchase of an Automated Security Awareness Program, from KNOWBE4, in the Amount of $25,482.60
Indexes: Goal 2 - Safe Peoria, Have an efficient government.
Attachments: 1. KnowBe4 Quote
ACTION REQUESTED:
Title
Communication from the City Manager and Interim Chief Information Officer to APPROVE the SOLE SOURCE Purchase of an Automated Security Awareness Program, from KNOWBE4, in the Amount of $25,482.60

Body
BACKGROUND: In 2020 we permitted our KnowBe4 CyberSecurity service contract to lapse. The first line of defense in CyberSecurity is the awareness and choices made by staff. This contract provided an automated security awareness program for the city.

Specifically, the KnowBe4 program included a validated education program with regularly scheduled testing and reporting to better target and follow up on the types of concerns that are most critical for our organization.

Earlier this year we performed a comprehensive CyberSecurity Assessment and were advised to reconsider this decision. The quote attached is a multi-year commitment to our security program in this area, driving down cost and earning an upgrade in service level. To get this discount and expanded service we are required to pay all three years up front.

The contract in the amount of $25,482.60 is an operational rate of $653.40 per month to support 715 accounts. (91? per account per month)


FINANCIAL IMPACT: $25,482.60 from Account: 1011631-503312

NEIGHBORHOOD CONCERNS: None, this is a back-office activity.

IMPACT IF APPROVED: We will have the ability to educate, test and assess our front-line staff decisions that lead to successful phishing attacks.

IMPACT IF DENIED: Our level of education and awareness will continue to fall as staff turn over and the approaches for phishing change. Risk of Cyber Attack will continue to increase.

ALTERNATIVES: We could attempt to perform these duties ourselves. This would be a very large effort of a staff member and not as effective.

EEO CERTIFICATION NUMBER: Below threshold

WHICH OF THE GOALS IDENTIFIED IN THE COUNCIL'S 2017 - 2032 STRATEGIC PLAN DOES THIS RECOMMENDATION ADVANCE?

1. Safe Peoria
2. Choose an item....

Click here for full text