EINF72324_-_Scope_of_Work.pdf

State Controller’s Office

RFQ-ITS EINF72324

Exhibit A

SCOPE OF WORK

A. Description of Services

The Contractor shall provide the State Controller's Office (SCO) with QualysGuard vulnerability and compliance management Software-as-a-Service (SaaS).

Agreement Term

The term will be for (3) three years with the option to amend add funds as deemed necessary by SCO.

The rates on Exhibit B, Attachment 1, Cost Worksheet will not change as a result of any amendment to this agreement. This agreement may be terminated by SCO with 30 days’ written notice to the Contractor.

Contractors are cautioned that no services will begin until the Agreement has been fully executed. If services are provided prior to agreement approval, and the Agreement for any reason is not approved, all previous services provided by the Contractor is considered donated to SCO and no payment shall be made for that work.

Agreement Amount

The Contractor and SCO contact listed in Exhibit A, Section D.1 are responsible for monitoring the Agreement cost to ensure it does not exceed the maximum amount of the Agreement without an executed amendment.

B. Contractor Responsibilities

1. The Contractor shall:

a. Provide SCO with QualysGuard software, to include:

1) Qualys Q-ESuite Express Suite

2) Qualys Web Application Scanning

3) Qualys Malware Detection Service for Sites

4) Qualys Scanner Appliance - Annual Term

5) Qualys Vulnerability Management, Detection, and Response (VMDR) Bundle

6) Qualys Policy Compliance - Includes Policy Compliance Agent

7) Qualys Patch Management (PM) – Annual Term for Windows Agent

8) Qualys Endpoint Detection Response with Anti-Malware

9) Qualys CyberSecurity Asset Management

10) Qualys Security Assessment Express Package

11) Qualys Security Assessment Questionnaire Express Add-On

Exhibit A

b. Provide customer support during business hours, Monday through Friday, 8:00 a.m. to 5:00 p.m.

Pacific Time (PT), excluding weekends and State holidays. A list of holidays observed by SCO may be found at the following link: http://www.calhr.ca.gov/employees/pages/state-holidays.aspx.

c. Email software or portal access to SCOITProcurement@sco.ca.gov.

C. SCO Responsibilities

1. SCO shall:

a. Identify SCO staff who are active users of the system.

b. Provide an SCO IT Support Team who will serve as the primary point of contact for all communications with the Contractor and QualysGuard during the term of the agreement.

D. Contacts

1. Direct all service inquiries to:

State Controller’s Office Contractor

Name: Name:

Address:

Phone: Phone:

Email: Email:

2. Direct all agreement inquiries to:

State Controller’s Office Contractor

Name: Name:

Phone: Phone:

Email: Email:

3. Contacts may be changed upon written notice to either party without an agreement amendment.

http://www.calhr.ca.gov/employees/pages/state-holidays.aspx mailto:SCOITProcurement@sco.ca.gov

Exhibit B

BUDGET DETAIL AND PAYMENT PROVISIONS

A. Invoicing and Payment

1. For services satisfactorily rendered, and upon receipt and approval of the invoices, SCO agrees to compensate the Contractor for actual expenditures incurred in accordance with the rates quoted.

2. Itemized invoices shall be submitted on Contractor’s letterhead, not more frequently than annually, and include at a minimum:

• Agreement Number EINF72324

• Dates of Service

• Description of Service Provided

If submitting electronically, send one PDF copy to: ADMAP@sco.ca.gov.

If invoices cannot be submitted electronically, please mail one copy to:

State Controller's Office

Departmental Accounting Office P.O. Box 942850

Sacramento, CA 94250-5877

Direct invoice inquiries to: ADMAP@sco.ca.gov.

B. Budget Contingency Clause

1. It is mutually agreed that if the Budget Act of the current year and/or any subsequent years covered under this agreement does not appropriate sufficient funds for the program, this agreement shall be of no further force and effect. In this event, SCO shall have no liability to pay any funds whatsoever to Contractor or to furnish any other considerations under this agreement and Contractor shall not be obligated to perform any provisions of this agreement.

2. If funding for any fiscal year is reduced or deleted by the Budget Act for purposes of this program, SCO shall have the option to either cancel this agreement with no liability occurring to SCO or offer an agreement amendment to Contractor to reflect the reduced amount.

C. Prompt Payment Clause

1. Payment will be made in accordance with, and within the time specified in, Government Code (GC) Chapter 4.5, commencing with Section 927 et seq.

mailto:ADMAP@sco.ca.gov mailto:ADMAP@sco.ca.gov

Exhibit B, Attachment 1

COST WORKSHEET

RFQ-ITS Attachment 15 shall be inserted here at Agreement award.

RFQ-ITSEINF72324

Exhibit C

INFORMATION TECHNOLOGY GENERAL PROVISIONS –

CLOUD COMPUTING SERVICES – GSPD-ITGP (REVISED AND EFFECTIVE 11/12/2024)

General Services Procurement Division, Information Technology – General Provisions Cloud Computing Services, GSPD - ITGP (Cloud) (Revised and Effective 11/12/24) shall be incorporated by reference only and made part of the Agreement as if attached hereto.

General Provisions Procurement Division, Information Technology – General Provisions Cloud Computing Services, GSPD - ITGP (Cloud) (Revised and Effective 11/12/24) may be viewed and downloaded at:

https://www.dgs.ca.gov/~/media/Divisions/PD/Acquisitions/Solicitation-Document-Attachments/GSPDITGP- CloudRevised-and-Effective-111224.docx

If you do not have internet access, a copy can be provided.

https://www.dgs.ca.gov/%7E/media/Divisions/PD/Acquisitions/Solicitation-Document-Attachments/GSPDITGP-CloudRevised-and-Effective-111224.docx https://www.dgs.ca.gov/%7E/media/Divisions/PD/Acquisitions/Solicitation-Document-Attachments/GSPDITGP-CloudRevised-and-Effective-111224.docx