Department: Public Health Services
Department Head/Elected Official: Barbie L. Robinson, MPP, JD, CHC - Executive Director
Regular or Supplemental RCA: Regular RCA
Type of Request: Contract - Amendment
Project ID (if applicable): N/A
Vendor/Entity Legal Name (if applicable): Ernst & Young, LLP
MWDBE Contracted Goal (if applicable): 10%
MWDBE Current Participation (if applicable): N/A
Justification for 0% MWDBE Participation Goal: N/A - Goal is not 0% and is listed above
Request Summary (Agenda Caption):
title
Request for approval to execute an amendment to an agreement with Ernst & Young, LLP for consulting services to provide improvements to the compliance assessment and enablement proposal.
end
Background and Discussion:
Ernst & Young, LLP's Risk and Compliance Assessment and Enablement proposal was developed to assist HCPH Compliance Program to close gaps, lead with knowledge, and ensure internal regulatory monitoring and prevention through the compliance program, as well as assess the current privacy and security infrastructure to mitigate risk. In performing the security and risk assessment, EY and HCPH agreed that a Red Team assessment would only provide short-term value because it would identify point-in-time findings. The EY and HCPH teams identified a more urgent task which would provide longer term value: Data cataloging and classification would help HCPH better understand its data breach risk exposure, and help plan for appropriate data protection. This change request replaces the Red Team assessment task with the Data cataloging and classification task, at no cost to the County.
Expected Impact:
The risk assessment will provide the the framework for HCPH to create and implement measures to reduce risk and raise the caliber of operations and services.
Alternative Options:
N/A
Alignment with Goal(s):
_ Justice and Safety
_ Economic Opportunity
_ Housing
X Public Health
_ Transportation
_ Flooding
_ Environment
X Governance and Customer Se...
Click here for full text