Miami County staff recommend three-year Arctic Wolf renewal after 3-year pilot; price and escalator noted

Miami County officials discussed renewing a three-year contract with Arctic Wolf, the county's managed cybersecurity provider, during the Sept. 3 study session. Lucas Mellinger, assistant county administrator, said Arctic Wolf manages the county's firewalls, monitors intrusions and runs security campaigns and monthly briefings for staff. He told commissioners the vendor offers a maximum contract length of three years.

Mellinger said the renewal would raise the county's annual cost from roughly $81,000 to about $92,800. He also noted the contract contains a 5 percent annual escalator. "Arctic Wolf only offers to a maximum contract length of 3 years," Mellinger said, adding, "So they're kind of our first line of defense when it comes to the technology world."

Commissioners asked about the escalator and how the vendor reports on incidents and training. Mellinger said escalators are typical in multiyear contracts and that Arctic Wolf provides incident explanations and monthly security meetings with county IT staff. He said the county has used Arctic Wolf for three years and that this is the first renewal. "They do those campaigns to kinda see our weak links so we can train those people up," he said.

No formal motion or vote to execute a renewal was recorded at the study session. Commissioners discussed the limits on negotiating longer terms and the vendor's market position. County staff and the IT team, including an employee identified as Casey, were described as continuing to hold monthly meetings with Arctic Wolf and review recommended security changes such as a new password policy.

County staff said they will bring contract documents and any negotiation options back to the board for action at a future meeting.