To: Brian K. Flewelling, Public Works Committee Chairperson
From: Michael Dawisha, CIO
title
RE: Approval of an agreement between Genesee County and Cisco Duo, in an amount not to exceed $39,700.00, to provide multi-factor authentication software for Genesee County network users; the cost of this agreement will be paid from account 1010-228.01-933.001
recommendation
BOARD ACTION REQUESTED:
Approval of the renewal of Cisco Duo software via SHI International
BACKGROUND:
Multi-Factor Authentication (MFA) is a vital control against account hijacking, and insurers increasingly set premiums and coverage based on whether organizations use such controls. Our IT department has utilized Cisco Duo MFA since 2020. MFA adds a second check-like a phone prompt, passkey, or one-time code-so stolen passwords are far less useful. It protects access to email, VPN, and internal apps, including remote work. Using Duo also aligns with current security guidance and common compliance expectations. Continued use-and expansion to any remaining systems-will lower account-takeover risk and support insurance and audit requirements.
DISCUSSION:
Renewal of 1,400 MFA licenses maintains full employee coverage and continuity of our MFA program, lowering hijacking risk and safeguarding email, VPN, and administrative server access. It also supports insurers and audit expectations and lets us continue rolling out phishing-resistant options (passkeys/security keys) to high-risk roles while keeping one-time codes as a backup.
IMPACT ON HUMAN RESOURCES:
There is no impact on Human Resources.
IMPACT ON BUDGET:
This is a budgeted expenses not to exceed $39,760.00 for 1400 licenses to be paid out of 1010-228.01-933.001. The renewal will cover 10/1/25 - 9/30/26. This is under Michigan Master Computing Program contract (MMCP) #0716600113.
IMPACT ON FACILITIES:
There is no impact on Facilities.
IMPACT ON TECHNOLOGY:
Reviewed by IT.
CONFORMITY TO COUNTY PRIORITIES:
Renewing the 1,400 MFA licenses aligns with the Long-Term Financial Stability priority by reducing the likelihood and cost of account-takeover incidents, protecting revenue-critical systems (email, VPN, and servers), and maintaining compliance.
resolution
TO THE HONORABLE CHAIRPERSON AND MEMBERS OF THE GENESEE COUNTY BOARD OF COMMISSIONERS, GENESEE COUNTY, MICHIGAN
LADIES AND GENTLEMEN:
BE IT RESOLVED, by this Board of County Commissioners of Genesee County, Michigan, that the request by the Chief Information Officer to authorize an expenditure, in the form of a purchase order, to SHI International to renew the 1,400 licenses that provide secure employee computer logins through multi-factor authentication, at a total cost not to exceed $39,760.00 to be paid out of account 1010-228.01-933.001 for fiscal year 2025-2026, is approved (a copy of the memorandum request and supporting documents being on file with the official records of the October 22, 2025 meeting of the Public Works Committee of this Board).