To: Board of Supervisors
From: Susan Brajkovic, Director of Risk Management
Report Title: Purchase Order with Knowbe4
Recommendation: Recommendation of the County Administrator
RECOMMENDATIONS:
APPROVE and AUTHORIZE the Purchasing Agent, or designee, on behalf of the Director of Risk Management, to execute a purchase order with Knowbe4, to provide Security Awareness Training subscription for a total payment limit of $2,418, effective from October 21, 2026, through October 20, 2028.
FISCAL IMPACT:
100% of costs will be funded through the Risk Management Department and are included in the department’s budget.
BACKGROUND:
The purpose of this purchase order is to continue to provide the Knowbe4 Security Awareness Training to County employees. The County has an ongoing need to strengthen cybersecurity awareness and reduce risks associated with phishing, social engineering, and other human-based cybersecurity threats. The services support the County’s efforts to protect County systems, confidential information, and other technology resources from cybersecurity incidents.
Knowbe4 Terms of Service agreement includes indemnification and limitations of liability.
CONSEQUENCE OF NEGATIVE ACTION:
If the requested action is not approved, Contra Costa County may have reduced ability to provide standardized cybersecurity awareness training and simulated phishing exercises to employees. The County could face increased risk of cybersecurity incidents resulting from human error, including unauthorized access, data exposure, or disruption of County systems.