In 2016, the city experienced a network attack where a number of city servers were "locked" with a cryptographic virus. The only data loss was to PC's at the Police Department. This event was the catalyst for finding a solution that could mitigate and reduce the risk from these types of attacks. After testing a number of systems, Arctic Wolf SOCaaS was identified as the best option to help manage the city's internet security.  During fiscal year 2018, city staff migrated from Washoe County's internet connection -- and, by extension, their security team -- to its own connection, a move made possible by Arctic Wolf's SOCaaS. In early 2020, IT began rolling out Arctic Wolf's managed detection and response (MDR) tool which dramatically increases our ability to monitor for intrusions into the city network, whether by software attack or malicious actors.

For several years the security team at Arctic Wolf has been quick to respond to problems and call as soon as a potential threat is identified by their systems.  After each incident, city staff meets to analyze the threat and risk of reoccurrence to identify and evaluate potential solutions. which is why we now track all logons to Office 365 outside of the United States.  The engineers work with city staff to keep our firewalls and security solutions working at the optimum level. 

The city added a redundant fire wall with an Arctic Wolf sensor to help keep our connections to the internet secure in the event of a firewall failure which allows city staff to switch to the backup firewall without waiting for equipment to ship next day from Arctic Wolf. Cost for shipping emergency replacements are included in the city’s annual support.  The redundant sensor affords the city limited internet downtime due to security equipment failure.   

City staff continues to monitor our relationship with Arctic Wolf and add solutions and other options as need and suggested by the security engineers at Arctic Wolf.

NRS Chapter 332.115(h) exempts computer hardware and software items from competitive bid, and these purchases utilize the joinder provision allowed under NRS 332.195 and NASPO ValuePoint Contract (formerly known as the Western States Contracting Alliance or WSCA). The funds for the purchases described herein were approved by the City Council as part of the FY2021 IT General Fund budget.

Staff recommends that the city authorize purchasing our FY21 maintenance contract and licensing with Arctic Wolf in the amount of $58,499.28.

1. City Council may choose to approve purchasing from Arctic Wolf for the fiscal year 2020 maintenance contract and software licensing renewal.
2. City Council may choose not to approve purchasing from Arctic Wolf and provide further direction to the City Manager.

I move to approve the purchase of the fiscal year 2021 maintenance contract (AC-5680) and software licensing renewal from Arctic Wolf in the amount of $58,499.28.