Skip to main content
Contra Costa County Header
File #: 25-5169    Version: 1 Name:
Type: Consent Item Status: Agenda Ready
File created: 11/24/2025 In control: BOARD OF SUPERVISORS
On agenda: 12/9/2025 Final action:
Title: APPROVE and AUTHORIZE the Chief Information Officer, or designee, to execute 1) a contract with SSP Data, in an amount not to exceed $3,200,000 for the deployment of Google managed cybersecurity services for a Countywide enterprise security operations program for the period of December 10, 2025, through December 9, 2028; and 2) a Cloud Master Agreement with Google LLC for a managed security services platform for the period of December 10, 2025, through December 9, 2028. (100% User Departments)
Date Ver.Action ByActionResultTallyAction DetailsMeeting DetailsVideo
No records to display.
To: Board of Supervisors
From: Marc Shorr, Information Technology Director
Report Title: Contract with SSP Data for Managed Security Services
?Recommendation of the County Administrator ? Recommendation of Board Committee


RECOMMENDATIONS:
APPROVE and AUTHORIZE the Chief Information Officer, or designee, to execute:
1) a contract with SSP Data, in an amount not to exceed $3,200,000 for the deployment of Google managed cybersecurity services for a Countywide enterprise security operations program for the period of December 10, 2025, through December 9, 2028, and
2) a Cloud Master Agreement with Google LLC for a managed security services platform for the period of December 10, 2025, through December 9, 2028.

FISCAL IMPACT:
The cost of this purchase is included in the Department's FY 25-26 budget. 100% User Departments.

BACKGROUND:
The Department of Information Technology (DoIT) is implementing a modernized, enterprise-level security operations program to strengthen the County's cybersecurity posture and improve threat detection and response. Under this contract, SSP Data will serve as the County's program integrator, coordinating delivery through its sub-contractors Citreno LLC, Google Security Operations (SecOps), Mandiant, and CrowdStrike. The three-year solution provides deployment and configuration of the Google SecOps SIEM/SOAR platform, integration of County security telemetry, enablement and optimization support, and 24/7 managed detection and response services. This unified model improves operational efficiency, and provides the County with a scalable, cloud-native security operations capability aligned with industry best practices.
SSP Data was selected through the County's formal RFP process based on its technical expertise and comprehensive cybersecurity delivery model.
The Google Cloud Master Agreement includes a limitation of Google's liability arising out of the agreement equal to three times the fees paid by County under the contract during the 12...

Click here for full text