Agency Human Services Dept

Contractor RED SIEGE LLC

SWIFT Contract Number 261325

Project Name Pen Test

Project Number (if applicable) {Empty}

Summarize purpose of the contract, including why it was necessary: Perform 3rd party, independent penetration testing of application as required for Centers for Medicaid Services (CMS) regulations.

Project Duration

Start Date Thu, 12/19/2024 - 00:00

Original end date Mon, 06/30/2025 - 00:00

Actual end date Tue, 04/01/2025 - 00:00

Did project finish on time? Yes

Total billable hours utilized (if applicable) {Empty}

Contract Amounts

Original contract: $27792.00

Amendments {Empty}

Contract total $27792.00

Did project finish within budget? Yes

What was the funding source? H5501 - Human Services Department

Is this a sole source contract? Yes

If this was a single source contract, explain why the agency determined there was only a single source for the services (if applicable) Honestly i am not sure if it was sole source or not. CMS requires that states use a different service provider for Pen Test and independent audit of systems to help ensure that providers are doing a diligent job and more likely to identify different defects or opportunities to improve system security posture.

Evaluator Name Sam Sharp

Evaluator Email Address Sam.sharp@state.mn.us

Evaluate the contractor's timeliness Very timely and willing to flex to schedules including staff availability, deadlines, scanning so as not to impact production systems. Quite professional and amenable.

Evaluate the contractor's quality On scale of 1-5 a 4

Evaluate the contractor's cost Reasonable and aligned with costs for similar services by other providers.

Evaluate the contractor's overall performance 4 out of 5 stars- Professional, High quality of work, great communications with our team and able to accommodate the challenges of working with big organizations.

Would you engage the contractor's services again? Yes

Describe any negative action taken during the duration of this contract (i.e., termination, pursuit of suspension, etc.): honestly the biggest challenge is trying to navigate both State procurement hurdles and CMS requirements, along with needing to do these things in a specified timeframe often provided by CMS with limited timeframe- 90 days or so. There are about 3-4 vendors that are on the state list of approved vendors and may have a contract in existence, which might help speed state processes.

Please rate the overall experience with the contractor 5 - very satisfied