READ ALONGSIDE THE SOURCE
Fort Walton Beach Resolution — 2026-09 Accepting Funding FL Department of Managed Services-Cybersecurity Software — reading text
Part 6 of 10. These parts divide the reading text for browsing; they are not the source document's page numbers.
Machine-extracted text — fwb-42816-original.pdf
Machine-extracted OCR text · Review label: Machine produced / unreviewed
Compare this copy with the preserved source. Review labels describe the recorded status of this file; they do not guarantee that the text is error-free. Spacing and line breaks are retained, with long lines wrapped to fit the screen.
MONrrORING
In addition to reviews of audits conducted in accordance with 2 CFR 200, Subpart F - Audit
Requirements, and section 215.97, Florida Statutes ( F.S.), as revised ( see AUDITS below),
monitoring procedures may include, but not be limited to, on-site visits by Department staff, limited
scope audits as defined by 2 CFR § 200.425, or other procedures. By entering into this
agreement, the Grantee agrees to comply and cooperate with any monitoring procedures or
processes deemed appropriate by the Department. In the event the Department determines that
a limited scope audit of the Grantee is appropriate, the Grantee agrees to comply with any
additional instructions provided by Department staff to the Grantee regarding such audit. The
Grantee further agrees to comply and cooperate with any inspections, reviews, investigations, or
audits deemed necessary by the Chief Financial Officer (CFO) or Auditor General.
AUDITS
Part 1: Federally Funded
This part is applicable if the Grantee is a state or local government or a nonprofit organization as
defined in 2 GFR §200.90, § 200.64, and § 200. 70.
1. A Grantee that expends $ 1, 000,000 or more in federal awards in its fiscal year must have a
single or program -specific audit conducted in accordance with the provisions of 2 CFR 200,
Subpart F - Audit Requirements. EXHIBIT 1 to this form lists the federal resources awarded
through the Department by this agreement. In determining the federal awards expended in
its fiscal year, the Grantee shall consider all sources of federal awards, including federal
resources received from the Department. The determination of amounts of federal awards
expended should be in accordance with the guidelines established in 2 CFR §§ 200. 502-
503. An audit of the Grantee conducted by the Auditor General in accordance with the
provisions of 2 CFR §200.514 will meet the requirements of this Part.
2. For the audit requirements addressed in Part I, paragraph 1, the Grantee shall fulfill the
requirements relative to auditee responsibilities as provided in 2 CFR §§200.508-512.
3. A Grantee that expends less than $ 1, 000,000 in federal awards in its fiscal year is not
required to have an audit conducted in accordance with the provisions of 2 CFR 200, Subpart
F - Audit Requirements. If the Grantee expends less than $ 1, 000,000 in federal awards in
its fiscal year and elects to have an audit conducted in accordance with the provisions of 2
CFR 200, Subpart F - Audit Requirements, the cost of the audit must be paid from non-
federal resources ( i. e., the cost of such an audit must be paid from Grantee resources
obtained from other than federal entities).
Part ll: State Funded
1. In the event that the Grantee expends a total amount of state financial assistance equal to
or in excess of $750,000 in any fiscal year of such Grantee (for fiscal years ending June 30,
DFS -A2 -CL Page - 1-
Rev. 11/ 18
Rule 69I-5. 006, F.A.C.
AUDIT REQu[RE viEN-Ts FOR AWARDS of
STATE AND FEDERAL FINANCIAL ASSISTANCE
2017, and thereafter), the Grantee must have a state single or project -specific audit for such
fiscal year in accordance with section 215.97, F.S.; Rule Chapter 691- 5, F.A.C., State
Financial Assistance; and Chapters 10.550 ( local governmental entities) and 10.650
nonprofit and for-profit organizations), Rules of the Auditor General. EXHIBIT 1 to this form
lists the state financial assistance awarded through the Department this agreement. In
determining the state financial assistance expended in its fiscal year, the Grantee shall
consider all sources of state financial assistance, including state financial assistance
received from the Department, other state agencies, and other nonstate entities. State
financial assistance does not include federal direct or pass-through awards and resources
received by a nonstate entity for federal program matching requirements.
2. For the audit requirements addressed in Part 11, paragraph 1, the Grantee shall ensure that
the audit complies with the requirements of section 215.97( 8), F. S. This includes submission
of a financial reporting package as defined by section 215.97(2), F. S., and Chapters 10.550
local governmental entities) and 10. 650 (nonprofit and for-profit organizations), Rules of the
Auditor General.
3. If the Grantee expends less than $ 750,000 in state financial assistance in its fiscal year (for
fiscal years ending June 30, 2017, and thereafter), an audit conducted in accordance with
the provisions of section 215.97, F.S., is not required. If the Grantee expends less than
750,000 in state financial assistance in its fiscal year and elects to have an audit conducted
in accordance with the provisions of section 215. 97, F. S., the cost of the audit must be paid
from the nonstate entity' s resources ( i. e., the cost of such an audit must be paid from the
Grantee' s resources obtained from other than state entities).
Part 111: Other Audit Requirements
N/A
Part IV: Report Submission
1. Copies of reporting packages for audits conducted in accordance with 2 CFR 200, Subpart
F - Audit Requirements, and required by Part I of this form shall be submitted, when
required by 2 CFR § 200.512, by or on behalf of the Grantee directly to the Federal Audit
Clearinghouse (FAC) as provided in 2 CFR §200. 36 and § 200. 512.
The FAC' s website provides a data entry system and required forms for submitting the
single audit reporting package. Updates to the location of the FAC and data entry system
may be found at the OMB website.
2. Copies of financial reporting packages required by Part 11 of this form shall be submitted by
or on behalf of the Grantee directly to each of the following:
a. The Department at the following address:
Cybe rsecuritygra nts0d ig ital.fl. gov
DFS -A2 -CL Page - 2-
Rev. 11/ 18
Rule 69I-5. 006, F.A.C.
AuDrr REQumEN[ENTs FOR AwARDs of
STATE AND FEDERAL FINANCIAL ASSISTANCE
b. The Auditor General' s Office at the following address:
Auditor General
Local Government Audits/342
Claude Pepper Building, Room 401
111 West Madison Street
Tallahassee, Florida 32399- 1450
The Auditor General' s website (https://fiauditor.gov/) provides instructions for cling an
electronic copy of a financial reporting package.
I Any reports, management letters, or other information required to be submitted to the
Department pursuant to this agreement shall be submitted timely in accordance with 2 CFR
200. 512, section 215.97, F.S., and Chapters 10. 550 ( local governmental entities) and
10. 650 ( nonprofit and for-profit organizations), Rules of the Auditor General, as applicable.
4. Grantees, when submitting financial reporting packages to the Department for audits done
in accordance with 2 CFR 200, Subpart F - Audit Requirements, or Chapters 10. 550 (local
governmental entities) and 10.650 ( nonprofit and for-profit organizations), Rules of the
Auditor General, should indicate the date that the reporting package was delivered to the
Grantee in correspondence accompanying the reporting package.
Part V: Record Retention
The Grantee shall retain sufficient records demonstrating its compliance with the terms of the
award( s) and this agreement for a period of five (5) years from the date the audit report is issued,
and shall allow the Department, or its designee, the CFO, or Auditor General access to such
records upon request. The Grantee shall ensure that audit working papers are made available to
the Department; or its designee, the CFO, or Auditor General upon request for a period of five (5)
years from the date the audit report is issued, unless extended in writing by the Department.
DFS -A2 -CL Page - 3-
Rev. 11/ 18
Rule 69I- 5. 006, F.A.C.
AUDIT REQUIREMENTS FOR AWARDS OF
STATE AND FEDERAL FINANCIAL ASSISTANCE
EXHIBrr 1
Federal Resources Awarded to the Grantee
Pursuant to this Agreement Consist of the Following:
1. Federal Program A:
N/A
2. Federal Program B:
N/A
Compliance Requirements Applicable to the Federal Resources
Awarded Pursuant to this Agreement are as Follows:
1. Federal Program A:
N/A
2. Federal Program B:
N/A
State Resources Awarded to the Grantee
Pursuant to this Agreement Consist of the Following:
Matching Resources for Federal Programs:
1. Federal Program A:
N/A
2. Federal Program B:
N/A
Subject to Section 215.97, F. S.:
1. State Project A: Local Government Cybersecurity Grant
State Awarding Agency: Florida Department of Management Services
Catalog of State Financial Assistance Title and Number: 72. 016
Amount: $
2. State Project B:
N/A
Compliance Requirements Applicable to State Resources Awarded
Pursuant to this Agreement Are as Follows:
The compliance requirements are as stated in Grant Agreement No. DMS -25/26- 148 between the
Grantee and the Department, entered in State Fiscal Year 2025-26.
DFS -A2 -CL Page - 4-
Rev. 11/ 18
Rule 691- 5. 006, F.A.C.
Purposes
Grantee desires to utilize software licenses, applications, and solutions, as applicable, in connection with
the attached Exhibit A — Cybersecurity Incident Response Rider and Exhibit B — Solution Rider,
incorporated herein. This DSA describes the terms and conditions for the use of software licenses,
applications, and solutions and protection of Covered Data, including requirements to safeguard the
availability, confidentiality, and integrity of Covered Data in furtherance of the security objectives of
Chapter 282, F. S.
I. Definitions
A. Access — The authorization to inspect, review, transmit, duplicate, communicate with, retrieve
data from, or otherwise make use of any Covered Data, regardless of type, form, or nature of
storage. " Access" to a computer system or network includes local and remote access, as
applicable.
B. Authorized Purpose — The purpose( s) for which an Authorized Third Party may access, use, or
