San Bernardino header
File #: 8063   
Type: Consent Status: Passed
File created: 5/15/2023 Department: Innovation and Technology
On agenda: 5/23/2023 Final action: 5/23/2023
Subject: Non-Financial Master Subscription Agreement with KnowBe4, Inc. for Cybersecurity and Information Security Training Software
Attachments: 1. COV-ITD-5-23-23-KnowBe4 Inc. Master Subscription Agreement, 2. CON-ITD-5-23-23-KnowBe4 Inc. Master Subscription Agreement, 3. Item #41 Executed BAI, 4. 23-342 Executed Contract
REPORT/RECOMMENDATION TO THE BOARD OF SUPERVISORS
OF SAN BERNARDINO COUNTY
AND RECORD OF ACTION

May 23, 2023

FROM
JAKE CORDOVA, Interim Chief Information Officer, Innovation and Technology Department

SUBJECT
Title
Non-Financial Master Subscription Agreement with KnowBe4, Inc. for Cybersecurity and Information Security Training Software
End

RECOMMENDATION(S)
Recommendation
Approve a non-financial Master Subscription Agreement, including non-standard terms, with KnowBe4, Inc. for cybersecurity and information security awareness training software, for purchase amounts as authorized by County Policy, for the period of May 23, 2023, through May 22, 2028.
(Presenter: Jake Cordova, Interim Chief Information Officer, 388-5501)
Body

COUNTY AND CHIEF EXECUTIVE OFFICER GOALS & OBJECTIVES
Improve County Government Operations.
Operate in a Fiscally-Responsible and Business-Like Manner.

FINANCIAL IMPACT
Approval of this item will not result in the use of Discretionary General Funding (Net County Cost). The Master Subscription Agreement (Agreement) with KnowBe4, Inc. (KnowBe4) is non-financial in nature and does not commit the County to make any purchases. Future purchases for the annual renewal of KnowBe4 cybersecurity and information security awareness training software are planned to be made under the Agreement, and the Innovation and Technology Department (ITD) will adhere to County purchasing policies and return to the Board of Supervisors for approval, if necessary.

BACKGROUND INFORMATION
ITD manages the Countywide Information Security Program (Program) designed to implement effective Information Technology (IT) security solutions and cybersecurity practices. The Program aims to reduce the County's overall cyber risk by mitigating potential cyberattacks, cyberthreats, and security incidents that target the County's enterprise network, including mission-critical systems, applications, and infrastructure.

A critical component of the Program i...

Click here for full text