|
TO: |
Board of Trustees |
|
THROUGH: |
Jay Fox, Executive Director |
|
FROM: |
Bill Greene, Chief Operating Officer |
|
PRESENTER(S): |
Todd Mills, Director of Supply Chain |
TITLE:

title
Pre-Procurements
- Long Range Transit Plan Consultant
- Code Vulnerability Management
end

AGENDA ITEM TYPE:
Pre-Procurement

RECOMMENDATION:
Informational report for discussion

BACKGROUND:
Utah’s Public Transit District Act requires all contracts valued at $200,000 or greater be approved by the UTA Board of Trustees. This informational report on upcoming procurements allows Trustees to be informed and provide input on upcoming procurement projects. Following the bid solicitation and contract negotiation process, final contracts for these projects will come before the board for approval.

DISCUSSION:
• Long Range Transit Plan consultant. This procurement is to contract with a firm to provide consulting services for the creation of our Long Range Transit Plan. The primary goal will be to retain an experienced consultant team with capabilities of supporting UTA in the development of an agency wide Long Range Transit Plan (LRTP) looking out 30 years into the future. In addition to assisting in the creation of the plan, this consultant will be tasked with documenting a replicable process so that UTA may keep this plan as a living document, with updates on a four-year cycle, coinciding with UTA’s Metropolitan Planning Organization (MPO) partners’ updates to their Regional Transportation Plans (RTPs). This procurement will be conducted as an RFP and funding for the project was included in the approved 2022 Operating Expense budget. (Req. 10353, Russell Fox)
• Code Vulnerability Management. This procurement is to contract with a firm to provide a code scan for internal and external systems, applications, and software. Once the initial scan of various applications, systems and software has been completed, a comprehensive list of vulnerabilities will be presented to UTA for review and acceptance. Phase 2 of this project is the remediation of bugs, vulnerabilities, and issues that the code scan has uncovered. Because it is impossible to determine ahead of time how many issues may be uncovered and the depth of the vulnerability, the vendor will prepare a recommendation with cost time estimate broken out by project. The Project Manager for UTA will then prioritize and authorize the work to be performed. This process will be completed using an Agile/Scrum Methodology. UTA may, in some cases choose to have the remediation work completed in-house and not by the vendor. The IT Enterprise Architect will also direct the applications to be remediated and coordinate code reviews. Funding for this project in 2022 will come from the IT Managed Reserve budget. Following years will be from 5200.50353.92 budget (Req. 10354, Georgiy Polishchuk)

ATTACHMENTS:
None