Committee backs one‑year Carahsoft agreement for continuous cyber testing using state grant funds

Tony Sage presented a request for a one‑year agreement with Carahsoft Technology Corporation to acquire continuous cyber‑testing services and asked that the committee recommend City Council approval of the $168,700.35 contract. "We negotiated a 43% discount, lowering the cost to a 168,700," he said, and staff noted the city secured $256,800 in state cybersecurity grant money and will apply $135,000 of that grant to this project.

Sage explained the platform provides continuous adversary simulation, attack-surface mapping, vulnerability verification and prioritization, supplementing the city's annual external and internal penetration testing rather than replacing it. Committee members asked about past pen-testing practices and about third‑party security standards; staff said the city rotates external testers every two to three years and benchmarks against peer cities. A motion to recommend council approval of the Carahsoft agreement passed unanimously.

The record shows committee discussion focused on leveraging grant funds, negotiating discounts and maintaining annual external testing cycles alongside the new continuous-testing platform.