Title/Name/Summary
Network Security Monitoring Services
History
In 2022, the Village issued a RFP for cybersecurity assessment and network security monitoring. After reviewing vendor proposals, the Board approved awarding a three-year contract with Computer Aid (CAI)/LMNTRIX for network security monitoring. Over the past three years, CAI/LMNTRIX has consistently demonstrated proficiency in keeping the VIllage network safe and secure. The services provided have included real-time threat detection, comprehensive incident response, and continuous monitoring of network activities, all of which have significantly bolstered our cybersecurity defenses.
Maintaining the partnership with CAI/Lmntrix will ensure continuity in managing the Village's cybersecurity profile. The benefits of continuing with their services include the benefits of retaining a trusted partner ensuring that there is no disruption in monitoring services and keeps the knowledge CAI/LMNTRIX has with the VIllage's complex environment with the Village and Police networks.
Staff, therefore, solicited a new proposal from CAI. The current contract allows for 10GB daily ingestion of log files into the ThinkGrid SIEM (Security Information and Event Management) which limits the the ability of the system to only analyzing and flagging firewalls logs for anomalies. To add additional logging capabilities and potential security threats, staff recommends the addition of another 10GB logging to the SIEM. This would increase the cost from $211,298.58 per year to $235,911.85 per year. The increased logging will allow domain controller and M365 logging to be added to the SEIM to identify security issues with user accounts.
Based on the outstanding performance and strategic benefits, staff recommends that we move forward with CAI/LMNTRIX for security monitoring services with an increase of the ThinkGrid SIEM to 20GB. Entering into a new contract will allow us to continue leveraging their expertise and ensure our cybersecurity measures remain at the forefront of industry standards.
CAI/LMNTRIX is a sole source due to its existing relationship with the Village. Changing security monitoring companies would be disruptive and the migration could leave the Village at risk. Staff also feels that since CAI/LMNTRIX presented a competitively selected proposal to the Village in 2022, and has not increased their price.
Financial Impact
Network monitoring and SEIM has been included in the fiscal year 2026, 2027, 2028, 2029 and 2030 years budgets.
Recommended Action/Motion
I move to approve the waiver of the competitive bid process in favor of a entering into a contract with a sole source vendor for a term of 3 years plus two optional years with Computer Aid Inc./ LMNTRIX and authorize the execution of a Professional Services Agreement between the Village of Orland Park and Computer Aid Inc. for an annual not-to-exceed cost for years 2026, 2027 and 2028 of $235,911.85 and a total three-year contract cost not-to-exceed $707,735.55 and for two optional years covering years 2029 and 2030, in a not-to-exceed Board approved budged amount;
AND
Approve authorizing the Village Manager to execute all related contracts subject to Village Attorney review.