City Council:
AN ORDINANCE CONFIRMING AND RATIFYING
AN EMERGENCY PROCUREMENT FOR ENHANCED
EMAIL PROTECTION AND IDENTITY THREAT
DETECTION & RESPONSE SERVICES FOR THE
CITY’S MICROSOFT 365 ENVIRONMENT
Whereas, in correspondence dated January 14, 2026, the Commissioner of the Department of Management Services formally requested authorization for emergency procurement undertaken by the Office/Department of Management Services in December 2025 for enhanced email protection and identity threat detection and response services for the City’s Microsoft 365 environment and the engagement of Hi-Link Technology Group LLC to provide Microsoft 365 Identity and Threat Detection & Response services, including 24x7 SOC monitoring and response support, on a City-wide basis; and
Whereas, the City of Mount Vernon relies on its Microsoft 365 email and identity systems as mission-critical infrastructure used daily by every City department to conduct essential governmental operations; and
Whereas, in or about December 2025, the City experienced active and escalating intrusion attempts into its Microsoft 365 email environment, posing a significant and immediate risk of account compromise, service disruption, and exposure of confidential and sensitive City information; and
Whereas, the threat activity was confirmed by a technology vendor as active and ongoing, including suspicious and malicious behavior impacting the City’s environment, requiring immediate remediation, containment, and continuous monitoring; and
Whereas, any delay in responding to these real-time cyber threats would have materially increased the likelihood of compromised user accounts, interruption of municipal operations, and harm to the City’s information systems and communications; and
Whereas, the Office/Department of Management Services determined that an emergency existed requiring immediate action in order to protect the continuity of City operations and the security of City data and communications; and
Whereas, prior to authorizing the emergency procurement, the Commissioner of Management Services consulted with key stakeholders, including the Mayor’s Office and the Comptroller’s Office, and concurrence was reached that immediate action was warranted due to the urgency and severity of the threat; and
Whereas, pursuant to applicable law and City procurement policies, emergency procurement is authorized when circumstances affecting public safety, health, or the protection of City property require immediate action and do not permit delay; and
Whereas, under such emergency conditions, the Office/Department of Management Services procured enhanced email protection and identity threat detection and response services from Hi-Link Technology Group LLC to provide immediate remediation, containment, and ongoing security monitoring; and
Whereas, the services procured include Microsoft 365 Identity and Threat Detection & Response with 24x7 Security Operations Center (SOC) monitoring and response support, providing City-wide coverage across the City’s Microsoft 365 email and identity systems; and
Whereas, the cost of said services is Fourteen Thousand Eight Hundred Eighty Dollars ($14,880.00) for 620 users, calculated at $24.00 per user, for the coverage period October 2025 through September 2026, including a trial month in September 2025; and
Whereas, this service enhances the City’s ability to detect and mitigate suspicious login activity, account compromise attempts, and advanced email-based threats, thereby strengthening the City’s cybersecurity posture against evolving risks that increasingly target municipal governments; and
Whereas, it is in the best interest of the City of Mount Vernon to confirm and ratify this emergency procurement in order to safeguard essential infrastructure and ensure uninterrupted delivery of services to City residents;
NOW, THEREFORE, BE IT ORDAINED BY THE CITY COUNCIL OF THE CITY OF MOUNT VERNON, NEW YORK, AS FOLLOWS:
Section 1. Confirmation of Emergency Procurement. The City Council hereby confirms and ratifies the emergency procurement undertaken by the Office/Department of Management Services in December 2025 for enhanced email protection and identity threat detection and response services for the City’s Microsoft 365 environment.
Section 2. Authorization of Vendor and Services. The City Council approves the engagement of Hi-Link Technology Group LLC to provide Microsoft 365 Identity and Threat Detection & Response services, including 24x7 SOC monitoring and response support, on a City-wide basis.
Section 3. Cost and Term. The City Council approves the total expenditure of $14,880.00 for said services, covering 620 users at $24.00 per user, for the period October 2025 through September 2026, inclusive of a trial month in September 2025, subject to the availability of funds.
Section 4. Findings of Emergency. The City Council hereby finds that an emergency existed at the time of procurement due to active and escalating cyber intrusion attempts, necessitating immediate action to protect City systems, data, and operations, and that such action was taken in good faith and in the best interest of the City.
Section 5. Severability. If any provision of this ordinance or the application thereof shall be held invalid, such invalidity shall not affect the other provisions or applications of this ordinance which can be given effect without the invalid provision or application.
Section 6. Effective Date. This ordinance shall take effect immediately upon adoption by the City Council and subsequent approval by the Board of Estimate and Contract.