To: Brian K. Flewelling, Public Works Committee Chairperson
From: James Terry, Chief Information Security Officer
RE: Approval to renew and enhance the CrowdStrike Falcon Cybersecurity Platform, not to exceed the cost of $199,675.96, for the period of April 26, 2025 through April 25, 2026
BOARD ACTION REQUESTED:
Approve to renew and enhance our Crowdstrike Cybersecurity platform not to exceed the cost of $199,675.96, for the period of April 26th, 2025 through April 25th, 2026.
BACKGROUND:
Genesee County Information Technology is looking to consolidate cybersecurity protection and response services by moving from our current outside Security Operation Center vendor by renewing and expanding our service agreement with our existing endpoint detection vendor. This consolidation will renew our current EDR subscription ($93,000 annually), replace our SOC ($65,000 annually) while providing additional security functionality and services.
Additional Services Include:
MFA for account elevation (required for Cyber Insurance)
MFA for remote access accounts
Better telemetry on computer and network activity
AI driven security analysis and recommendations
Automated Vulnerability and Security Assessments
24/7 security monitoring with remote detection and response capabilities
Identity risk monitoring and response capabilities
DISCUSSION:
IMPACT ON HUMAN RESOURCES:
IMPACT ON BUDGET:
Renewal cost of Crowdstrike ($93,000) is included in IT budget for FY25. IT will reallocate budgeted security related expenses of $115,000 to two vendors budgeted in FY25 to ensure this increased expense to this one vendor does not require any additional funding. Expense will be applied to 1010-228.01-933.001
For FYE 25, $85,860.66 will be charged to account 1010-228.01-933.001 and $113,815.30 will be charged to 1010-000.00-123.000 Prepaid expenses
For FYE 26, the $113,815.30 will be moved from 1010-000.00-123.000 Prepaid expenses to 1010-228.01-933.001.
Quote uses Michigan Master Computing Program Contract (Software Only) part of Michigan MiDEAL Contract
IMPACT ON FACILITIES:
IMPACT ON TECHNOLOGY:
IT will replace the existing SOC with Crowdstrike. This implementation will offer enhanced visibility and security across the county network.
CONFORMITY TO COUNTY PRIORITIES:
This solution will simplify monitoring and management of end point security and Identity protection. Reducing the administrative burden to secure and monitor our cybersecurity posture throughout the year, increasing our cybersecurity staff’s efficiency.
TO THE HONORABLE CHAIRPERSON AND MEMBERS OF THE GENESEE COUNTY BOARD OF COMMISSIONERS, GENESEE COUNTY, MICHIGAN
LADIES AND GENTLEMEN:
BE IT RESOLVED, by this Board of County Commissioners of Genesee County, Michigan, that the request by the Chief Information Security Officer to authorize a Purchase Order to SHI International Corp for the purchase of a Crowdstrike Falcon Cybersecurity platform, at a total cost not to exceed $200,000.00 for the period commencing April 26, 2025, through April 25, 2026, to be paid from the following accounts as indicated, is approved:
• $85,860.66 from account 1010-228.01-933.001 for FY25;
• $113,815.30 from account 1010-000.00-123.000 for FY25; and
• $113,815.30 to be transferred from account 1010-000.00-123.000 to account 1010-228.01-933.001 for FY26;
(a copy of the memorandum request and supporting documents being on file with the official records of the April 16, 2025 meeting of the Public Works Committee of this Board).