Contra Costa County Header
File #: 24-3223    Version: 1 Name:
Type: Consent Item Status: Passed
File created: 9/18/2024 In control: BOARD OF SUPERVISORS
On agenda: 10/1/2024 Final action: 10/1/2024
Title: APPROVE and AUTHORIZE the Purchasing Agent to execute, on behalf of the County Librarian, a purchase order with Zoho Corporation in an amount not to exceed $7,649 for renewal of ManageEngine ADAudit Plus subscriptions to support security monitoring and auditing of library user accounts, for the period August 4, 2024 through August 3, 2027. (100% Library Fund)

To:                                          Board of Supervisors

From:                                          Alison McKee, County Librarian

Report Title:                     Purchase Order with Zoho Corporation for ManageEngine ADAudit Plus Subscriptions through August 3, 2027

Recommendation of the County Administrator Recommendation of Board Committee

 

RECOMMENDATIONS:

APPROVE and AUTHORIZE the Purchasing Agent to execute, on behalf of the County Librarian, a purchase order with Zoho Corporation in an amount not to exceed $7,649 for the renewal of ManageEngine ADAudit Plus subscriptions, subject to the terms of Zoho Corporation’s Software License Agreement for the period August 4, 2024, through August 3, 2027.

 

FISCAL IMPACT:

100% Library Fund.

 

BACKGROUND:

The Library uses ManageEngine ADaudit for monitoring and auditing Active Directory, file server and Windows servers. This product sends out daily reports and notifies the Library Automation Department about changes to user accounts, Active Directory changes, sensitive file changes, server access and failed login attempts. All this helps monitor for cybersecurity and malware attacks.

 

Zoho Corporation’s Software License Agreement includes a limitation of liability capping liability at the amount of fees paid in the prior 12 months, approved by County Counsel.

 

CONSEQUENCE OF NEGATIVE ACTION:

If the Purchase Order is not approved, the Contra Costa County Library’s IT operations will not be able to function as they have been. Minimal preventive monitoring of Active Directory for Cybersecurity or Malware would take place if ADaduit if not renewed.