Laserfiche WebLink
City of Santa Ana Website Maintenance and Support Services <br />Exhibit B <br />Scope of Work <br />Website Maintenance and Support Services <br />This Scope of Work (SOW) describes the optional maintenance and support services <br />("Services") available from 360 Business Consulting ("360") for the City's Website and Drupal <br />Content Management System ("Website," "Site," or "CMS' ) for the City of Santa Ana ("City'). <br />The City, at its discretion, may elect to utilize 360's maintenance and support services during <br />the term of this agreement. <br />A. MAINTENANCE AND SUPPORT SERVICES <br />The City may choose to use to one of the following -360 website maintenance and support <br />services. <br />• Self -Hosted Maintenance and Support ("Self -Hosted") <br />• 360 and Amazon Web Services Hosted Maintenance and Support ("360 -Hosted") <br />Self -Hosted <br />In this arrangement, the City is responsible to provide the hardware and <br />infrastructure environment that the website and CMS nun on. This can be onsite <br />at the City Data Center or at a third -parry hosting service such as Amazon Web <br />Services (AWS). <br />360 will provide the following services. <br />• Website and Drupal CMS Technical Support <br />• Website Content Change Updates <br />• Website and Drupal CMS Administrator and Content Contributor Training <br />• 24/7 monitoring and intrusion alerts <br />• Drupal security updates and certification of compatibility <br />• Patches, programming and maintenance support as needed <br />• Usage, uptime, response times and hardware monitoring <br />• Security Monitoring, Analysis, and Response <br />o IP -based security features for administration, locking access to admin <br />functions by default to whitelisted IPs through client's VPN infrastructure (can <br />be disabled by 360 in event of temporary failure of VPN environment, SSO <br />issues and only at City's request) <br />o Restriction of access by roles, with alert monitoring for access requests <br />outside of the role's defined parameters. <br />o Non-standard directory paths, permissions and configurations. <br />o Tar -pitting and monitoring of excessive access requests from accounts, <br />including admins, managers and users. <br />o Segregation of Drupal tables to limit access as much as possible to role - <br />defined tables and reporting, monitoring and tar -pitting of suspicious access. <br />Scope of Work <br />25E-28 <br />