AgdaPkt 2020-06-22 Joint SA PFA - Laserfiche WebLink

Browse Search

6.H. - Page 15 of 24 EXHIBIT "A" SCOPE OF SERVICES KEY PERSONNEL Dr. Scott Thomas — Principal Scientist in Charge Jeff Cooley — Project Manager TASK 1 - RISK AND RESILIENCE ASSESSMENT (RRA) 1_1 — Project Management ATTACHMENT A Consultant shall hold a Kick -Off Meeting with City staff to discuss scope, schedule, and project details. The Kick -Off Meeting shall ensure City's goals and objectives of the project are clearly understood by the Consultant. Progress meetings and invoicing will be scheduled. Data Management and Quality Control policies will be established and approved. Dr. Scott Thomas, Consultant's Principal Scientist in Charge, will be responsible for every aspect of the work and will provide direction and quality control throughout each phase. The Consultant's Project Manager, Jeff Cooley, shall lead and monitor the project in a clear and proactive manner according to the following policies and options: Cost Control Cost control begins early in the project. Consultant shall ensure that City objectives and expectations are clear and communicated to all team members. Senior technical experts shall be involved in the process early to evaluate budget, staffing, and time constraints. In addition, early involvement of the technical staff shall ensure that project objectives and constraints are incorporated into and carried through the project planning and implementation processes. Data Security Consultant's computing infrastructure shall be geared towards security as the core of its operations, utilizing a full spread of System -level, Network -level, and Organization -level planned and managed enterprise -class software and hardware solutions. Cybersecurity shall be built from the ground up with anti-virus, encrypted firewalls and VPNs, well- defined password policies, and security training for everyone within the organization. Project -level IT shall require a greater focus on data and hardware used in the field by professionals and partners. The following measures shall be taken for the hardware and software levels: All hardware shall be tightly controlled with remote monitoring and system wipe implementations as needed. Project laptops and desktops shall have Multi -Factor Authentication utilizing a complex password, pushed authentication to mobile devices, and Biometric Authentication. Project data shall be provisioned on the Microsoft SharePoint Online platform. City data shall only be accessible via a secured terminal server within an isolated Microsoft Azure REV: 06-04-2020 MI ATTY/AGR.2020.088/ARRC Consultants, LLC (Page 12 of 20) 202