HomeMy WebLinkAboutC25-238 Rule4, Inc_first amendment FIRST AMENDMENT TO AGREEMENT BETWEEN
EAGLE COUNTY, COLORADO
AND
RULE4, INC.
THIS FIRST AMENDMENT (“First Amendment”) is effective as of ____________ by and
between Rule4, Inc., a Colorado public benefit corporation (hereinafter “Consultant” or
“Contractor”) and Eagle County, Colorado, a body corporate and politic (hereinafter “County”).
RECITALS
WHEREAS, County and Consultant entered into an agreement dated the 1st day of January, 2025
for certain cybersecurity consulting Services (the “Original Agreement”); and
WHEREAS, the Original Agreement contemplated that the Consultant would perform certain
duties with compensation in an amount not to exceed $50,000; and
WHEREAS, County and Consultant desire by this First Amendment to expand the scope of
Services and compensation as set forth in the Original Agreement.
FIRST AMENDMENT
NOW THEREFORE, in consideration of the foregoing and the mutual rights and obligations as
set forth below, the parties agree as follows:
1. The Original Agreement shall be amended to include additional Services as described
in Exhibit 1, which is attached hereto and incorporated herein by reference.
2. The compensation for the additional Services set forth in Exhibit 1 shall not exceed
$17,000 or a total maximum compensation under the Original Agreement and this
First Amendment of $67,000.
3. Capitalized terms in this First Amendment will have the same meaning as in the
Original Agreement. To the extent that the terms and provisions of the First
Amendment conflict with, modify or supplement portions of the Original Agreement,
the terms and provisions contained in this First Amendment shall govern and control
the rights and obligations of the parties.
4. Except as expressly altered, modified and changed in this First Amendment, all terms
and provisions of the Original Agreement shall remain in full force and effect, and are
hereby ratified and confirmed in all respects as of the date hereof.
5. This First Amendment shall be binding on the parties hereto, their heirs, executors,
successors, and assigns.
Docusign Envelope ID: 6271AD9D-C8A7-46E2-9654-1B424F44782D
6/3/2025
2
Eagle County Am Scope and Comp Final 4/28/2022
IN WITNESS WHEREOF, the parties hereto have executed this First Amendment to the Original
Agreement the day and year first above written.
COUNTY OF EAGLE, STATE OF COLORADO,
By and Through Its COUNTY MANAGER
By: ______________________________
Jeff Shroll, County Manager
CONSULTANT
Rule4, Inc.
By: _____________________________________
Print Name: ______________________________
Title: ___________________________________
Docusign Envelope ID: 6271AD9D-C8A7-46E2-9654-1B424F44782D
Paul Nelson
CTO
3
Eagle County Am Scope and Comp Final 4/28/2022
EXHIBIT 1
Rule4 (Contractor) will provide CIS Gap Analysis services to the County.
Contractor will use interview and attestation-based statements to capture the coverage
completeness of the County's implementation of CIS Critical Security Controls v8.1
(Implementation Groups (IG) IG1 and IG2).
As part of this gap analysis, Contractor will work with the County to accomplish the following
tasks:
• Conduct a kickoff meeting to review phase objectives, tasks, and schedule.
• Facilitate a guided interview process with one key resource as a primary point of
interaction, who will involve other team members as appropriate for interviews or to
obtain point answers related to control capabilities.
• Hold sufficient discussion on a per-control basis to identify the general control
implementation status within County.
• Apply a perceived maturity rating of controls based on attestations, from Initial,
Repeatable, Defined, Quantitatively Managed, and Optimized (1-5 respectively).
Deliverables. This phase will result in a spreadsheet-based gap analysis document that provides
summarized control states and maturity levels, as well as a companion summary report, based on
CIS Critical Security Controls v8.1, IG1 and IG2. The gap spreadsheet will include priority
ratings for control development (based on the perceived risk of control gaps to the County), to
help guide future security control prioritization.
Contractor will provide these services at the following fixed cost:
Docusign Envelope ID: 6271AD9D-C8A7-46E2-9654-1B424F44782D
