Information

Type: Deliberation

Department: IT - Information Technology

Directors' Update: TBD

Business Meeting: July 14, 2026

Summary:

Approval of a Statement of Work (SOW No. 198981, dated July 1, 2026) with CDW Government LLC for FRSecure virtual Chief Information Security Officer (vCISO) services using Sourcewell cooperative contract #121923-CDW. The five-year FACT vCISO Program includes a security risk assessment, security program roadmap, ongoing Tier 2 vCISO advisory services, quarterly vulnerability scanning, SecurityStudio platform access, and incident response registration. Authorizes the Director of Information Technology Services to sign the Statement of Work.

Publications:

Cover Letter To: CDW Government LLC, 200 N. Milwaukee Ave., Vernon Hills, IL 60061

Additional Copies To: Information Technology Services; Auditor's Office; Budget Office

Resolution

WHEREAS, Lewis County Information Technology Services is responsible for recommending and implementing appropriate technology solutions for Lewis County, including solutions that protect the security of county information systems and data; and

WHEREAS, Lewis County has a need for dedicated information security leadership and expertise to identify and measure risk, develop a strategic security program roadmap, and provide ongoing guidance to build an effective and measurable information security program; and

WHEREAS, virtual Chief Information Security Officer (vCISO) services provide access to expert security resources at a fraction of the cost of a full-time executive position, and include a security risk assessment, a security program roadmap, ongoing vCISO advisory support, quarterly vulnerability scanning, security program management platform access and incident response registration; and

WHEREAS, Sourcewell is a State of Minnesota local government unit and service cooperative created under the laws of the State of Minnesota (Minnesota Statutes Section 123A.21) which offers cooperative procurement solutions to government entities. Participation is open to eligible federal, state/province, and municipal governmental entities, higher education, K-12 education, nonprofit, tribal government and other public entities located in the United States and Canada; and

WHEREAS, Sourcewell facilitates a competitive public solicitation and contract award process for the benefit of its participating entities across the United States and Canada. Sourcewell's solicitation process complies with State of Minnesota law and policies and results in cooperative purchasing solutions. These contracts are established using the following process:

• Sourcewell issues a competitive public solicitation (RFP) for products or services on behalf of participating entities.
• The solicitation is advertised nationally for a minimum of 30 days. Current and historical solicitations are available on Sourcewell's website.
• Sourcewell's contracts are available for use by eligible federal, state, municipal, educational, nonprofit, tribal government, and other public entities located in the United States and Canada.
• Vendors respond to the solicitation with sealed responses that are recorded and publicly opened.
  Sourcewell evaluates the responses based on identified evaluation criteria and awards contracts.
• Contract awards are ratified by the Sourcewell Board of Directors

WHEREAS, the Lewis County Procurement Procedure Manual encourages cooperative purchasing when those procurements are in accordance with the Procurement Procedural Manual and Chapter 39.12 RCW; and

WHEREAS, Sourcewell issued RFP #121923 for Technology Products and Services with Related Solutions, which was publicly advertised beginning October 31, 2023, with proposals due December 19, 2023; and

WHEREAS, Sourcewell awarded contract 121923-CDW to CDW Government LLC, 230 N. Milwaukee Avenue, Vernon Hills, IL 60061, for Technology Products and Services with Related Solutions in Category 1, effective through February 27, 2028; and

WHEREAS, the Sourcewell contract award was ratified by the Sourcewell Board of Directors on March 19, 2024, by Resolution No. 2024_12; and

WHEREAS, the Sourcewell 121923-CDW contract for the purchase of vCISO services was solicited in conformity with procurement requirements within the Lewis County Procurement Procedural Manual and Chapter 39.12 RCW. The general terms and conditions and special contract terms and conditions contained in Sourcewell contract 121923-CDW are hereby incorporated by reference and shall apply to this purchase; and

WHEREAS, CDW Government LLC has presented Statement of Work No. 198981, dated July 1, 2026, under which CDW Government LLC, through its partner FRSecure, will deliver the FRSecure Advanced Cybersecurity Team (FACT) vCISO Program, consisting of a Security Risk Assessment (L2), a Security Program Roadmap, ongoing Tier 2 vCISO advisory services, quarterly vulnerability scanning, SecurityStudio platform access, and incident response registration and triage call access, over a five (5) year term; and

WHEREAS, the fees under Statement of Work No. 198981 are fixed at a total of $306,130.00, invoiced in equal quarterly milestones of $15,306.50 over the five-year term, and the Statement of Work may be terminated by either party without cause upon at least 14 (fourteen) days' advance written notice; and

WHEREAS, the Lewis County Board of County Commissioners (BOCC) has reviewed the proposed Statement of Work and has determined this is an appropriate use of the Information Technology professional services budget.

NOW THEREFORE BE IT RESOLVED the BOCC hereby approves the utilization of Sourcewell contract 121923-CDW with CDW Government LLC for the purchase of FRSecure vCISO services for Lewis County pursuant to Statement of Work No. 198981, with the fees totaling $306,130.00, invoiced in equal quarterly milestones of $15,306.50 over the five-year term. The terms of the cooperative contract are stipulated in the Sourcewell contract 121923-CDW and the Lewis County Director of Information Technology Services is hereby authorized to sign said Statement of Work.

DONE IN OPEN SESSION this ___ day of ___, ___.