HomeMy WebLinkAbout1st Amend - SDI PresenceFIRST AMENDMENT TO AGREEMENT TO PERFORM PROFESSIONAL SERVICES
This first amendment ("First Amendment") to the agreement for IT Support Services
("Agreement"), dated November 1, 2022, by and between the City of Redlands, a municipal
corporation and a general law city ("City"), and SDI Presence LLC, a Delaware Limited Liability
Company ("Consultant"), is made and entered into this 3rd day of October, 2023.
RECITALS
WHEREAS, it is the desire of the City and Consultant to amend their existing Agreement,
specifically to Article 5.1 to increase the not -to -exceed payment amount to the consultant from
five hundred thousand dollars ($500,000) to seven hundred and fifty thousand dollars ($750,000),
and to Exhibit "A" — Scope of Services to incorporate the planning and design work for the new
City Hall and PD Safety Hall facilities.
NOW, THEREFORE, for good and valuable consideration in the receipt of which is hereby
acknowledged City and Consultant agree as follows:
AGREEMENT
Section 1. Section 5.2 of the Agreement, entitled "Compensation", is hereby amended to
read as follows:
5.2 Total compensation for Consultant's performance of the Services shall not
exceed the amount of seven hundred and fifty thousand dollars ($750,000) over the
Initial and Renewal Terms. City shall pay Consultant on a time and material basis
in accordance with Exhibit "B," titled "Rate Schedule," which is attached hereto
and incorporated herein by this reference."
Section 2. Exhibit "A" entitled "Scope of Services" and as described in Article 2.1 is hereby
replaced with a new Exhibit "A", which is attached hereto and incorporated herein and into the
Agreement by this reference.
Section 3. All other provisions of the Agreement shall remain unchanged by this First
Amendment and in effect.
SIGNATURES ON NEXT PAGE
1
I:\cmo\Agreements\SDI_Presence_rirst Amendment-PY22-0253.docx-,jm
IN WITNESS WHEREOF, the parties have executed this First Amendment, to be effective
as of October 3, 2023.
CITY OF 'i= P LANDS SDI PRESENCE LLC
ddie Tejeda, Mayor
ATTEST:
ie Donaldson, City Clerk
2
I:\cmo\Agreements\SDI_Presence_First Amendment-FY22-0253.docx jm
By: �►MtcJt
Sharee L. Wolff, CFO
EXHIBIT "A"
SCOPE OF SERVICES
(Amended)
Overview of Proposed Services
1. SDI personnel will perform a comprehensive assessment of the current state of the environment.
This assessment includes, but is not limited to, system scans, deployment of host -based
monitoring and reporting tools, and hands-on inspection of infrastructure devices. The resulting
baseline snapshot includes an inventory of computer hardware including virtualized assets,
software including version details, and network infrastructure devices including interconnection
details. This initial assessment is intended to help gauge deviations from generally accepted
information technology management best practices.
2. The SDI management team, along with key SDI personnel, will interview organizational
stakeholders to document historical challenges, current operations, and discuss departmental
objectives requiring IT solutions and support.
3. SDI will produce a comprehensive report for your management that includes the baseline snapshot
information, summary of stakeholder discussions, and recommendations for short-term corrective
measures and long-term solutions targeting optimal IT operations to meet organizational
objectives. In summary, this report helps support the development of a guide for system
management services and serves as supporting documentation for an IT Master Plan. Note that
recommendations may also include reduction or expansion of specific hardware/ software
platforms, modifications to currently employed technologies, and augmentation/training for staff.
All recommendations are substantiated with information gathered throughout the assessment.
4. SDI will support the IT Design Services for the new City Hall and PD Safety Hall facilities,
including project management, development of procurement documents, infrastructure
assessment, developing a list of recommended standards, and system design and documentation,
Specific Services Included
Server Support
SDI's server support methodology is integrated within the overall endpoint management practices described
below in the Managed Services Technology section. In general, SDI typically furnishes clients with an
Information Technology Service Management solution to increase the efficiency and effectiveness of the
entire service offering. This host -based continuous monitoring agent, installed on each computer endpoint,
conducts environmental data collection and provides a centralized IT management portal.
3
I:\cmo\Agreements\SDI_Presence_Pirst Amendment-PY22-0253.docx jm
SDI will perform initial assessments of hardware problems as well as basic upgrades (RAM, storage,
controller cards), however on -site technicians generally defer to manufacturer warranty coverage for
hardware failures.
Services management such as Active Directory, DHCP, DNS, Group Policy, Print and Document Services,
115, Windows Deployment Services, and Windows Server Update Services are all managed as a part of the
core operations for all environments.
SDI will implement a monthly patch management schedule for server operating systems wherein select
non -critical servers will receive operating system and application patches as a part of a test group. In the
event these servers experience problems with the patches, a rollback process will be enacted. If no
problems are identified, the patches will be applied to the remaining servers.
Office 365 Administration
Procurement
SDI will assist with the procurement of Microsoft licensed products by leveraging existing Enterprise
Agreements previously negotiated by larger organization(s) to obtain favorable pricing not typically
available to smaller local government organizations.
Modernization
SDI will transition the City's email system from a version -based Microsoft Office model to software as a
service with subscription -based Office 365 hosted on Microsoft 365 Government Community Cloud
(GCC), including Microsoft -hosted email solutions, Active Directory/ Azure synchronization, OneDrive,
SharePoint Online, and Teams.
Administration
SDI will perform conversions/migrations for Microsoft 365 as well as ongoing management of existing
365 environments. Typical administration begins with the information management policy development
and configuration for new environments, or policy assessment in collaboration with organizational
stakeholders for existing environments. Examples of policy considerations vary widely from on -premises
only office productivity suites.
SDI will configure municipal client hosted environment within the Microsoft 365 Government
Community Cloud (GCC) which provides compliance with federal requirements for cloud services,
including FedRAMP High, Defense Federal Acquisition Regulations Supplement (DFARS), and
requirements for criminal justice and federal to x information systems (CJI and FTI data types).
Network Administration
SDI can and will manage numerous firewalls from manufacturers such as Cisco, Fortinet, Sonicwall; site-
to- site VPNs, and remote -access VPNs leveraged for both border security and internal segmentation at
several sites. Additionally, SDI can migrate clients to application -layer/ next -generation firewalls
(NGFW) to provide a more unified threat management platform that includes application -layer visibility
4
I:\cmo\Agreements\SDI_Presence_First Amendment-FY22-0253.docx-j m
to increase understanding of application traffic, expanded traffic control options beyond blunt allow/deny,
reduction of threat vectors, improved performance and security, and simplified management.
Network infrastructure monitoring and alerting is typically performed using a mixed on -premises and
cloud -based network monitoring tool to perform continuous monitoring of network devices and traffic.
This service provides:
• A real-time view of the City's network, including all the devices and interconnections
• A real-time inventory of all the technology on the City's network
• Automated backups of network infrastructure configurations
• 24/7 proactive infrastructure monitoring and alerting
• Automated troubleshooting tools and secure remote access to the City's infrastructure devices
• Performance reports
Security Administration
SDI can establish a robust and layered security model when feasible. Details of the City's existing
INFOSEC model are purposely excluded from this document to preserve the integrity of that model. In
general terms, SDI will develop a comprehensive INFOSEC proposal to address any observed
deficiencies in the City's adherence to a generally accepted risk management framework applicable to
government -owned systems. Labor hours to implement INFOSEC recommendations by SDI included
within the scope of services. There is, however, the potential for additional software, hardware, and
licensing costs that must be borne by the City to proceed. The proposal will include assessment of
existing, and recommendations to implement, the following technologies:
• Intrusion detection system/intrusion prevention system (IDS/IPS)
• Security information and event management (SIEM)
• Audit logging and correlation of compatible computer systems
• Audit logging and correlation of compatible network infrastructure equipment
• Endpoint security [e.g., firewall, anti -virus, anti-malware, application whitelisting, etc.]
• Vulnerability assessment and management
• Disaster planning [e.g., IT contingency planning, continuity of operations, etc.]
Managed Services Technology
SDI will furnish the City with an Information Technology Service Management (ITSM) solution to
increase the efficiency and effectiveness of the entire service offering. This ITSM employs a host -based
continuous monitoring agent, installed on each computer endpoint, to conduct envirolunental data
collection and centralize IT management. This highly configurable agent improves the efficiency of IT
management through:
• Centralized remote administration, support, and power management
• Customized continuous monitoring and alerting
• Operating system patch -level monitoring and management
• Endpoint status reporting and alerting
• Inventory tracking
5
I:\cmo\Agreements\SDI_Presence_First Amendment-FY22-0253.docx-jm
The monitoring and alerting feeds into the helpdesk ticket and resolution tracking component, thereby
automating the tracking of system -generated alerts. Desktop endpoint management services typically
include setup and configuration of desktops; ongoing hardware diagnostics and support of all desktops,
printers, and other peripherals; maintenance of operating system and application patch levels in
accordance with agreed -upon outage schedules; installation, upgrades, and troubleshooting of software
as required; maintenance of accurate hardware and software inventories; performance of minor hardware
installations and modifications on IT equipment. Server endpoint management services typically include
the same as desktop endpoints with the addition of administration of server -based file systems to ensure
that access to organizational data is secure and available for authorized users/groups, administration of
Active Directory, enterprise application support.
Typical monthly patch management schedules include select users and systems that receive the operating
system and application patches as a part of a test group. In the event these users experience problems
with the patches, a rollback process will be enacted. If no problems are identified, the patches are applied
to the remaining workstations.
Project Management
SDI will provide a comprehensive suite of project management and IT services to the City. The scope of
services provided include specialized planning and management of mission -critical public safety
applications, large-scale software and hardware upgrade/replacement projects, custom software
development, data -center operations, and routine O&M. The scope of support levels ranges from
supplemented IT support, wherein SDI provides part-time/full-time IT professionals to supplement
municipal IT staff as needed, to full -service IT support, wherein SDI provides full-time IT consultants to
lead IT operations, and project managers for consultative technical implementations.
Projects range from conception, wherein SDI performs technology assessments and strategic planning, to
full implementation wherein SDI assumes control of in- progress projects, and SDI can execute full life -
cycle projects identified post -assessment.
Law Enforcement Mobile Data Computing
SDI can provide MDC tier 1-3 support 24/7/365 for many Southern California Law Enforcement
agencies. All of SDI employees will meet CJIS security requirements and have passed an extensive
background check similar to that conducted by law enforcement. SDI will apply its extensive knowledge
of all aspects of MDCs for law enforcement use including Microsoft operating systems for PC and
servers, Office 365, mobile device management software, image creation for fast and efficient hardware
deployment/restore, VPN in a mobile environment, and CAD/RMS systems to name a few. SDI will
employ certified Spillman technicians supporting several Spillman clients.
SDI will employ its extensive experience with the design and deployment of the MDC in -vehicle and
backbone hardware and software for law enforcement applications.
6
I:\cmo\Agreements\ SDI_Presence_First Amendment-PY22-0253.docx-jm
Additional Services Included:
IT Design services for the new City Hall and PD Safety Hall
• Assistance for City Hall and for the Safety Building facility tenant improvements.
• Assist and advise City IT, police, police dispatch, and project Staff, project architect(s).
• Assist in development of construction RFPs, selection of contractors.
• Assist City Staff in IT aspects of project management for construction.
• IT design input toward the building tenant improvements and facility moves.
• A listing of recommended standards, policies, procedures needed to execute this project and
that benefit future ongoing operations, such as wiring standards, equipment standards,
technology acceptable use, security policies. Develop draft documents for those identified and
agreed upon.
• Project management assistance. No project plan deliverables provided by SDI.
• IT integration in building, space planning, local and internet wiring. Or work with the
architects' structured cabling design groups.
• Assistance in HVAC, but final recommendation toward construction to be by the
project architect and/or electrical engineer and contractor. SDI to provide IT needs and
written recommendations.
• Power, but final recommendations toward construction to be provided by the project architect
and/or electrical engineer and contractor. SDI to provide IT needs and written
recommendations.
• Fire suppression, but final recommendations to be provided by Fire Life Safety engineers.
• Camera Systems for both City Hall and PD; work with departments to develop specifications
and RFP.
• Access controls for both City Iall and PD; work with departments to develop access groups
and access doors. Develop RFP for access control installation or work with the City's existing
contractor.
• Coordinate with the City's 911 carrier to move the PSAP 911 circuits.
• Coordinate antenna/radio tower moves from existing location at PD to new PD Safety Hall.
• Coordinate with the City's police department -located equipment moves, that belongs to others -
Sheriff, OES, etc.
• Coordinate with the City's 911 console provider. Note we determined 911 funding will not be
available until the end of the project, just prior to the anticipated move -in dates. The new console
is thought to be installed in the new PD.
• Coordination with the City's radio system contractors - Public Works' LMR and Safety. Note
SDI does not have in-house radio system expertise, only working knowledge.
• Assist the City's AV engineering/contractor in relocation of Council Chambers audio/video
collection, streaming and storage, as required.
• Assist in conceptual design of the phone system move and/or migration and upgrade. Assist
development of an RFP if necessary.
• Coordination to include considerations for housing or accessing the City's traffic systems, fleet
management, fueling, airport weather, control systems (water, sewer SCADA), cashiering/credit
card systems, including server or network assets and radio connectivity as needed.
• Deliver final network schematic and documentation upon project completion.
7
I:\crno\Agreements\SDI_Presence_First Amendment-FY22-0253.docx-jm