Primary Department: Universal Services
Primary Department Head/Elected Official: Sindhu Menon, Executive Director & CIO
Secondary Department: Choose an item.
Secondary Department Head/Elected Official:
Regular or Supplemental RCA: Supplemental RCA
Type of Request: Purchase Order
Project ID (if applicable): #13086
Vendor/Entity Legal Name (if applicable): Multi-State Information Sharing and Analysis Center (MS-ISAC)
MWBE Contracted Goal (if applicable): n/a
MWBE Current Participation (if applicable): n/a
Justification for 0% MWBE Participation Goal: N/A - Goal not applicable to request
Grant Indirect Costs Rate (if applicable): n/a
Justification for 0% Grant Indirect Costs Rate (if applicable): N/A - Not a grant item
Request Summary (Agenda Caption):
title
Request by Universal Services for approval of a Multi-State Information Sharing and Analysis Center (MS-ISAC) Subscription.
end
Background and Discussion:
Seeking solution to support the on-going security efforts of Harris County is subscribing to the Multi-State Information Sharing and Analysis Center (MS-ISAC). The MS-ISAC is a national cybersecurity resource specifically designed for U.S. State, Local, Tribal, and Territorial (SLTT) government organizations.
Membership to MS-ISAC would grant access to the following resources:
• 24/7/365 Security Operations Center (SOC): Real-time monitoring and incident response.
• Cyber Threat Intelligence: Alerts, advisories, and weekly reports on malicious domains/IPs.
• Incident Response Support: Expert assistance during cyber incidents.
• Cybersecurity Tools: Access to CIS SecureSuite, CIS Benchmarks, and more.
• Training & Exercises: Webinars, tabletop exercises, and best practice sharing.
• Secure Communication Portals: For sharing sensitive information among members.
Expected Impact:
Harris County faces the following complex and evolving cybersecurity threat landscape:
• Sophisticated Ransomware: Groups like Akira and Qilin (recently associated to the recent attack on Sugar Land, TX) are targeting local governments.
• Third-Party Risk: Vendors and service providers remain a weak link.
• Resource Constraints: Limited budgets and staffing shortages.
• Emerging Threats: AI-driven attacks, phishing, and credential stuffing.
Alternative Options:
County Strategic Plan Goal: 1. Make Harris County safer and more just.
County Strategic Plan Objective: Choose an item.
Justice/Safety Initiative (Goal 1): Choose an item.
Infrastructure Initiative (Goal 2): F2: Improve data collection, utilization, and availability to drive better transportation safety decision-making.
Economy Initiative (Goal 3): Choose an item.
Health Initiative (Goal 4): Choose an item.
Climate/Resilience Initiative (Goal 5): Choose an item.
Housing Initiative (Goal 6): Choose an item.
Additional notes related to the Strategic Plan:
Prior Court Action (if any):
|
Date |
Agenda Item # |
Action Taken |
|
10/30/2025 |
262 |
To direct Universal Services to add Generative AI information security assessment to the existing Cybersecurity risk management framework |
Location:
Address (if applicable):
Precinct(s): Countywide
|
Fiscal and Personnel Summary |
|
Service Name |
MS-ISAC Subscription |
|
|
|
Current Fiscal Year Cost |
Annual Fiscal Cost |
|
|
Labor |
Non-Labor |
Total |
Recurring Expenses |
|
Funding Sources |
|
|
Existing Budget |
|
|
|
|
|
Choose an item. |
$ |
$24,000 |
$ |
$30,000 |
|
Choose an item. |
$ |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
$ |
|
Total Existing Budget |
$ |
$ |
$ |
$ |
|
Additional Budget Request (Requires Fiscal Review Request Form) |
|
|
Choose an item. |
$ |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
$ |
|
Total Additional Budget Request |
$ |
$ |
$ |
$ |
|
Total Funding Sources |
$ |
$ |
$ |
$ |
|
Grants - Proposed Budget (For Grants Items only) |
|
|
Labor |
Non-Labor |
Total |
No. of Grant Years |
|
Local Match Source - Existing Budget: Choose an item. |
$ |
$ |
$ |
|
|
Local Match Source - Additional Budget Request: Choose an item. |
$ |
$ |
$ |
|
|
Grant Funds Applied for/Awarded (Total) |
$ |
$ |
$ |
|
|
Personnel (Fill out section only if requesting new Position Control Numbers (PCN)s) |
|
|
Current Position Count for Service |
- |
- |
- |
- |
|
Additional Positions Request |
- |
- |
- |
- |
|
Total Personnel |
- |
- |
- |
- |
|
County Attorney’s Office Legal Review (for Harris County Code Items only) |
|
CAO Reviewer Name and Title |
|
CAO Review Completion Date |
Click or tap to enter a date. |
Anticipated Court Date: 11/13/2025
Anticipated Implementation Date (if different from Court date): Click or tap to enter a date.
Emergency/Disaster Recovery Note: Not an emergency, disaster, or ARPA related item
Contact(s) name, title, department: Sindhu Menon, Executive Director & CIO, HCUS,
George Reeves, Interim ISO, HCUS
Attachments (if applicable):