Primary Department: Universal Services
Primary Department Head/Elected Official: Sindhu Menon, Executive Director and CIO
Managing Department: Universal Services
Managing Department Head/Elected Official: Sindhu Menon, Executive Director and CIO
Regular or Supplemental RCA: Supplemental RCA
Type of Request: Investment Memo
Investment Memo Type: Final Investment Memo
Project Name: Cyber Security
Project ID (if applicable): NI007
Vendor Legal Name (if applicable): N/A
MWBE Contracted Goal (if applicable): N/A
MWBE Current Achievement (if applicable): N/A
Justification for 0% MWDBE Participation Goal: N/A - Goal not applicable to request
Grant Indirect Costs Rate (if applicable): N/A
Justification for 0% Grant Indirect Costs Rate (if applicable): N/A - Not a grant item
Incremental Authorization Requested: $6,200,000
Total Estimated Project Cost: $15,000,000 (FY27+FY28)
Request Summary:
title
Request by Universal Services for approval of a Final Investment Memo for the Cyber Security project, for an incremental authorization of $6,200,000 for a total authorization of $7,100,000 for FY2027, and request for commercial paper funding in the amount of $3,700,000.
end
Project Description:
This project is an ongoing cybersecurity program based on best practices. The objective of this project is to enhance Harris County's overall cybersecurity and enhance the county’s cybersecurity program with people, policy, process, and technology. The program’s objectives are designed to (1) mitigate known risks, (2) address ongoing threats, and (3) ensure a defense-in-depth strategy that will continuously improve the County’s ability to proactively identify and address risks across the county's enterprise network and technology resources.
This project provides critical systems to keep Harris County secure from cyberattacks targeting the county’s computer systems, networks, and data, including digital attacks and unauthorized access. For FY2027, the projects include penetration testing, Identity and Access Management (IAM) application system (Single Sign-On, Multifactor Authentication), cybersecurity consultants, and cybersecurity labor. This includes the implementation of new detection, monitoring, and protective controls while ensuring compliance with regulatory controls.
FY2026 accomplishments include
• Annual Penetration Testing - Internal & External Testing has been completed
• Threat Intelligence Platform - Actively receiving, monitoring, and actioning threat intel
• Law Enforcement MFA pilot has been completed
• Identity and Access Management (IAM) RFP has reached the evaluation phase
• SOC Phase III implementation (MDR and Managed SIEM)
In FY2027, Cyber Security focus will be on the following:
|
Penetration testing - testing of prioritized applications or capitalizable services before operation |
Penetration testing will allow the detection of application vulnerabilities and improper configurations, as well as the implementation of corrective action. Initial penetration testing before deployment is essential to development and is capitalized in this project. Testing will be based on County priorities. |
|
Identity and Access Management (IAM) system |
Upgrade of the county’s Identity and Access Management system infrastructure will increase performance and enhance our ability to restrict access to authorized users. This consists of hardware and one-time software development costs. The solution will provide a scalable IAM solution aligned with the County’s IT modernization strategy and evolving business and security needs. The RFP should be completed, and implementation should start in 2027. |
|
MFA for Law Enforcement (LE)/ CJIS |
Implement MFA for LE and CJIS communities by completing MFA for MDTs, start MFA for LE/CJIS laptops, desktops, and servers, and implement MFA for JWEB & LENS applications, expanding to other applications in 2028. |
|
Cybersecurity Labor |
Cybersecurity labor will comprise personnel to implement Cybersecurity capital project setup, and deployment. Enhance Cyber Review Committee. |
|
Cybersecurity Consultant Services |
The consultant personnel will support Cybersecurity capital project setup and deployment. |
In 2027, Harris County will build upon the successful implementation and stabilization of SOC Phase III by executing a defined set of planned enhancements across the Security Operations Center (SOC) and Network Operations Center (NOC). These enhancements are focused on improving operational maturity, increasing visibility, and strengthening coordination between security and network operations while leveraging existing MDR and SIEM investments.
The Enterprise Identity and Access Management (IAM) RFP will guide the procurement of a modern, scalable IAM solution aligned with the County’s IT modernization strategy and evolving business and security needs. Key deliverables include:
• Elimination of fragmented workflows and manual interventions across HR, PeopleSoft, IAM, Infrastructure, and Helpdesk teams.
• Implementation of automated, policy-driven workflows to streamline identity lifecycle management.
• Implementation of Zero Trust Network Access (ZTNA), Single Sign-On (SSO), and Multi-Factor Authentication (MFA) with minimal privileged security access policies.
• Continuous alignment with federal, state, and local compliance frameworks and standards.
• Integration of threat intelligence, auditing, logging, and real-time analytics for proactive anomaly detection and intelligent access decisions.
Anticipated Project Expenditures and Timeline:
|
Project Scope Breakdown |
Estimated Cost |
Estimated Completion |
|
Penetration Testing |
$500,000 |
9/30/2027 |
|
Identity and Access Management (IAM) |
$2,800,000 |
9/30/2027 |
|
Multi-Factor Authentication (MFA) for LE/CJIS |
$600,000 |
9/30/2027 |
|
Cyber Security Labor |
$800,000 |
9/30/2027 |
|
Cyber Security Consultant Services |
$2,200,000 |
9/30/2027 |
|
Project Manager |
$200,000 |
9/30/2027 |
|
FY27 Total Authorization |
$7,100,000 |
|
|
Unencumbered existing project balance to carry into FY27 |
($900,000) |
|
|
FY27 Incremental Authorization |
$6,200,000 |
|
Justification & Alternatives:
This project enables rapid incident detection, prevention, analysis, response, and monitoring processes that will minimize potential disruption to county services from a cyber-attack. The requested software, services, and staff will help address requirements identified as needing to be addressed for Criminal Justice Information Services (CJIS), Payment Card Industry Data Security Standard (PCI-DSS), Health Insurance Portability and Accountability Act (HIPAA), and Privacy compliance. Compliance with these standards is required to meet basic law enforcement data security standards and process credit/debit card transactions. This project will also demonstrate the cyber security competency required to qualify for some grant programs, bond ratings, insurance, and business contracts.
No alternatives have been identified for this project that provides adequate cybersecurity. Failure to secure the county’s enterprise network, devices, and data from unauthorized access and criminal use can lead to ransomware attacks, data exfiltration, distributed denial of service, loss of citizen trust, and loss of compliance with PCI, CJIS, HIPAA/HI-Trust, EHR, Privacy laws, etc. Alternate funding sources are not available for this project.
Anticipated Impact on Other Funds (If Applicable):
|
Fund Code |
Description |
Estimated Cost |
Funding Method (Existing or Future Budget Request Required) |
Estimated Date of Needs |
|
|
|
$- |
|
- |
|
|
|
$- |
|
- |
|
Total |
|
$- |
|
- |
County Strategic Plan Goal: 2. Connect our community with safe, reliable, equitably distributed, and well-maintained infrastructure.
County Strategic Plan Objective: H: Improve the condition and resilience of County transportation, flood control, and other infrastructure.
Justice/Safety Initiative (Goal 1): Choose an item.
Infrastructure Initiative (Goal 2): F2: Improve data collection, utilization, and availability to drive better transportation safety decision-making.
Economy Initiative (Goal 3): Choose an item.
Health Initiative (Goal 4): Choose an item.
Climate/Resilience Initiative (Goal 5): Choose an item.
Housing Initiative (Goal 6): Choose an item.
Previous Court Action:
|
Date |
Agenda Item # |
Action Taken |
|
10/30/2025 |
25-6765 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=7712361&GUID=2B394E07-9EF1-4089-B01F-5AC0E575974D&Options=ID|Text|Attachments|Other|&Search=NI007>Request for approval of the reallocation of commercial paper funding for Universal Services for the Cyber Security project from Series D-2 to Series D in the amount of $2,765,000 for a net CP funding of $9,730,000. |
|
|
8/26/2025 |
25-5332 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=7522181&GUID=36797BA4-C7FB-41E9-BAAE-95C87BF6C6D8&Options=ID|Text|Attachments|Other|&Search=NI007>Request for approval of a Final Investment Memo for the Cyber Security project, for an incremental authorization of $6,170,000 for a total authorization of $6,570,000 for FY2026 and commercial paper funding in the amount of $3,000,000. |
|
|
4/10/2025 |
25-2375 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=7290048&GUID=99167C6E-3743-47D8-BE02-89F029CC8C3E&Options=ID|Text|Attachments|&Search=NI007>Request by the Office of Management and Budget for approval of commercial paper funding for Universal Services for the Cyber Security project in the additional amount of $705,000 for a total CP funding of $6,730,000. |
|
|
1/9/2025 |
25-0050 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=7080893&GUID=85CF55B5-8A69-4AC6-98BC-5194B79E127F&Options=ID|Text|Attachments|&Search=NI007>Request for approval of commercial paper funding for Universal Services for the Cyber Security project in the additional amount of $650,000 for a total CP funding of $6,025,000. |
|
|
10/8/2024 |
24-6287 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=6883605&GUID=832AA9E4-558E-4361-BBA5-853E894C3884&Options=ID|Text|Attachments|&Search=NI007>Request for approval of the Final Investment Memo for the Cybersecurity project (continuous) for an additional incremental authorization of $5,536,500 for an FY2025 total authorization of $5,736,500. |
|
|
8/29/2023 |
23-4823 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=6325786&GUID=27C6A201-2729-4E58-8083-A744C47902AF&Options=ID|Text|Attachments|&Search=NI007>Request for approval of the Final Investment Memo for the Cyber Security project for an additional incremental authorization. |
|
|
11/29/2022 |
22-7519 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=5942375&GUID=8C84713C-2688-4B0A-8208-8456380ACA80&Options=ID|Text|Attachments|&Search=NI007>Request for approval of the Final Investment Memo for the Cyber Security project (continuous) for an additional incremental authorization of $3,052,500 for an FY 2023 total authorization of $6,752,500. |
|
|
3/8/2022 |
22-1753 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=5477821&GUID=835F049E-50F8-42EC-8532-3C6725EC0C5C&Options=ID|Text|Attachments|&Search=NI007>Request for approval of commercial paper funding for Universal Services for the Cyber Security project in the additional amount of $1,000,000 for a total CP funding of $5,375,000. |
|
|
2/22/2022 |
22-1291 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=5460200&GUID=FA63C3BF-24B1-40A6-9112-7E852A9A135C&Options=ID|Text|Attachments|&Search=NI007>Request for approval of the Final Investment Memo for the Cyber Security project for an additional incremental amount of $3,272,000 for a SFY 2022 authorization of $5,209,000. |
|
|
1/25/2022 |
22-0637 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=5389607&GUID=BF3ADB83-17EF-4659-9652-1A4492960EBC&Options=ID|Text|Attachments|&Search=NI007>Request for approval of commercial paper funding for Universal Services for the Cyber Security project in the additional amount of $990,000 for a total CP funding of $4,375,000. |
|
|
6/29/2021 |
21-2845 <https://harriscountytx.legistar.com/LegislationDetail.aspx?ID=5008372&GUID=40B14283-8C5E-4278-8721-EFFD065545E1&Options=ID|Text|Attachments|&Search=NI007>Transmittal of the Commercial Paper Status Report for the 1st Quarter FY 2021-2022. This report is a requirement of the Commercial Paper Policies and Procedures approved annually by Commissioners Court. |
|
Address:
Precinct(s): Countywide
|
Fiscal and Personnel Summary |
|
Service Name |
NI007 |
|
|
|
Current Fiscal Year Cost |
Annual Fiscal Cost |
|
|
Labor |
Non-Labor |
Total |
Recurring Expenses |
|
|
|
|
|
|
|
Funding Sources |
|
|
Existing Budget |
|
|
|
|
|
Commercial Paper |
$ |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
$ |
|
Total Current Budget |
$ |
$ |
$ |
$ |
|
Additional Budget Request |
|
|
Commercial Paper |
$400,000 |
$3,300,000 |
$3,700,000 |
$ |
|
Choose an item. |
$ |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
$ |
|
Total Additional Budget Request |
$400,000 |
$3,300,000 |
$3,700,000 |
$ |
|
Total Funding Request |
$400,000 |
$3,300,000 |
$3,700,000 |
$ |
|
Personnel (Fill out section only if requesting new PCNs) |
|
|
Current Position Count for Service |
- |
- |
- |
- |
|
Additional Positions Request |
- |
- |
- |
- |
|
Total Personnel |
- |
- |
- |
- |
Anticipated Court Date: 10/15/2026
Anticipated Implementation Date (if different from Court date): Click or tap to enter a date.
Emergency/Disaster Recovery Note: Not an emergency, disaster, or ARPA related item
Legal funding compliance confirmed by: Paige Abernathy, First Assistant County Attorney-Legal Operations, 8/14/2025
Department Approval by: Heather Merkel, Director of Budget, Universal Services 7/27/2026
OMB CIP Team Approval by: William McGuinness, Director-Capital Projects & Infrastructure, 9/30/2026
________________________________________
Commercial Paper Request (For OMB use only):
Receiving Department: Universal Services
Project PeopleSoft ID: NI007
CP Series Description: Commercial Paper Series D can be used for (1) construction of public works, (2) the purchase of automobiles, equipment and machinery, including computers, materials and supplies for the operation of the County’s precincts and departments (3) Professional services, including services provided by engineers, architects, attorneys, auditors, financial advisors, and fiscal agents, in connection with the contractual obligations described in (1) and (2).
Commercial Paper is being requested for the Cyber Security project and is expected to be repaid within the next three fiscal years either through bonds, budgetary means or pay-as-you-go sources.
OMB Financial Management contact: Fahad Gulzar, Deputy Executive Director, Office of Management and Budget