Laserfiche WebLink
Information Technology Department <br />www.santa-ana.org/IT <br />Item # 12 <br />City of Santa Ana <br />20 Civic Center Plaza, Santa Ana, CA 92701 <br /> Staff Report <br />July 1, 2025 <br />TOPIC: Email Security and Cybersecurity Awareness Training <br />AGENDA TITLE <br />Agreement with CDW-G for Email Security and Cybersecurity Awareness Training <br />Software Subscription Services (Specification No. 25-090) (Non-General Fund) <br />RECOMMENDED ACTION <br />Authorize the City Manager to execute an agreement with CDW-G for cloud-based email <br />security and cybersecurity awareness training services for a 39-month term. The <br />agreement will commence on or after July 1, 2025, with the exact start date to be adjusted <br />based on the actual implementation and purchase order issuance. The agreement end <br />date will be extended accordingly to maintain the full 39-month term, in an annual amount <br />not to exceed $75,306 to accommodate potential growth in user licenses, for a total not- <br />to-exceed amount of $225,918 over the 39-month term (Agreement No. A-2025-XXX). <br />GOVERNMENT CODE §84308 APPLIES: No <br />DISCUSSION <br />The City of Santa Ana currently relies on two separate platforms to support its <br />cybersecurity framework: one for on-premise email security and another for employee <br />cybersecurity awareness training. However, the current email security solution is based <br />on legacy technology that will no longer be supported after March 2026. Without security <br />updates or patches, the continued use of this system poses significant operational and <br />security risks. Furthermore, the existing platforms lack the advanced capabilities and <br />flexibility of modern cloud-based solutions, limiting the City’s ability to effectively detect <br />and respond to today’s rapidly evolving cyber threats. <br />In response, staff recommends transitioning to a consolidated, cloud-based cybersecurity <br />solution that integrates advanced email threat protection with user training tools. The <br />proposed solution would replace the City’s current platforms, streamline system <br />administration, and improve threat visibility. It would also enhance employee awareness <br />through interactive cybersecurity training, including simulated phishing campaigns and <br />behavior-based learning modules. <br />  <br />  <br />City Council 12 – 1 7/1/2025