Title
Approval of Amendment No. 1 to Services Agreement No. AGR18-20 with Intellibind Technologies, LLC in the amount of $300,000.00 for a Total Contract Amount of $800,000.00, plus Applicable Gross Receipts Tax, for the Purpose of Critical Infrastructure Protection Version 5 Comprehensive Patch Management Services
Recommended Action
I move that Council approve Amendment No. 1 to Services Agreement No. AGR18-20 with Intellibind Technologies, LLC in the amount of $300,000.00 for a Total Contract Amount of $800,000.00, plus Applicable Gross Receipts Tax, for the Purpose of Critical Infrastructure Protection Version 5 Comprehensive Patch Management Services.
Utilities Manager Recommendation
The Utilities Manager recommends that Council approve the motion as presented.
Board, Commission or Committee Recommendation
The Board of Public Utilities recommends that Council approve the motion as presented.
Body
In July of 2016 new cyber security regulations, North American Electric Reliability Corporation Critical Infrastructure Protection Version 5 (CIP-5), were implemented that apply to the operators of electric transmission lines. The Los Alamos Power Pool comprised of DOE/LANL and Los Alamos County share responsibilities in operating "pool assets". LANL/DOE owns approximately 21 miles of transmission line, triggering the CIP-5 regulations, and the DPU owns and operates the electric Supervisory Controls and Data Acquisition (SCADA) system supporting the pool's electric infrastructure. The CIP-5 regulations apply to the DPU SCADA system.
When the RFP was issued for these services the plan was to transfer the Electric SCADA System to LANL by January 2019. Since then the schedule has moved out by two years. LANL will not be ready to take over the system until 2021. We will remain contractually responsible for performing the Patching of the SCADA system until LANL takes over the system and we will need the services of Intellibind until then. Additional funding is needed to maintain the services for the lengthened term and to adjust for higher than estimated spending. Within a month of advertising the RFP for these services, two major occurrences took place that greatly increased the volume of work by Intellibind from what was anticipated.
First, our SCADA Technician who had worked for nearly two years in upgrading our SCADA system to comply with new cyber security regulations resigned. This resulted in a large amount of effort on the part of Intellibind to gather information, assess our system requirements and baseline our system to prepare a Patching program to meet regulatory requirements.
Second, we were audited by our regulating agency for compliance with the recently implemented cyber security regulations. Intellibind, as the subject matter expert on the Critical Infrastructure Protection regulations, proved support addressing the various non-compliant findings of the audit. Again, the loss of our SCADA technician and his institutional knowledge impaired our ability to address audit findings so we engaged Intellibind to assist and develop corrective actions.
Alternatives
If the contract amount is not increased the support services provided by Intellibind will not be available beyond May 2019. We will not have adequate staff or expertise to meet the regulatory requirements.
Fiscal and Staff Impact
The services are budgeted in the Electric Production fund. The cost of these services is split between the County and DOE/LANL with the County paying 20% and DOE/LANL paying 80%.
Attachments
A - AGR18-20 Amendment No. 1