READ ALONGSIDE THE SOURCE

Fort Walton Beach Resolution — 2026-09 Accepting Funding FL Department of Managed Services-Cybersecurity Software — reading text

Part 6 of 10. These parts divide the reading text for browsing; they are not the source document's page numbers.

Machine-extracted text — fwb-42816-original.pdf

Machine-extracted OCR text · Review label: Machine produced / unreviewed

Compare this copy with the preserved source. Review labels describe the recorded status of this file; they do not guarantee that the text is error-free. Spacing and line breaks are retained, with long lines wrapped to fit the screen.

MONrrORING In addition to reviews of audits conducted in accordance with 2 CFR 200, Subpart F - Audit Requirements, and section 215.97, Florida Statutes ( F.S.), as revised ( see AUDITS below), monitoring procedures may include, but not be limited to, on-site visits by Department staff, limited scope audits as defined by 2 CFR § 200.425, or other procedures. By entering into this agreement, the Grantee agrees to comply and cooperate with any monitoring procedures or processes deemed appropriate by the Department. In the event the Department determines that a limited scope audit of the Grantee is appropriate, the Grantee agrees to comply with any additional instructions provided by Department staff to the Grantee regarding such audit. The Grantee further agrees to comply and cooperate with any inspections, reviews, investigations, or audits deemed necessary by the Chief Financial Officer (CFO) or Auditor General. AUDITS Part 1: Federally Funded This part is applicable if the Grantee is a state or local government or a nonprofit organization as defined in 2 GFR §200.90, § 200.64, and § 200. 70. 1. A Grantee that expends $ 1, 000,000 or more in federal awards in its fiscal year must have a single or program -specific audit conducted in accordance with the provisions of 2 CFR 200, Subpart F - Audit Requirements. EXHIBIT 1 to this form lists the federal resources awarded through the Department by this agreement. In determining the federal awards expended in its fiscal year, the Grantee shall consider all sources of federal awards, including federal resources received from the Department. The determination of amounts of federal awards expended should be in accordance with the guidelines established in 2 CFR §§ 200. 502- 503. An audit of the Grantee conducted by the Auditor General in accordance with the provisions of 2 CFR §200.514 will meet the requirements of this Part. 2. For the audit requirements addressed in Part I, paragraph 1, the Grantee shall fulfill the requirements relative to auditee responsibilities as provided in 2 CFR §§200.508-512. 3. A Grantee that expends less than $ 1, 000,000 in federal awards in its fiscal year is not required to have an audit conducted in accordance with the provisions of 2 CFR 200, Subpart F - Audit Requirements. If the Grantee expends less than $ 1, 000,000 in federal awards in its fiscal year and elects to have an audit conducted in accordance with the provisions of 2 CFR 200, Subpart F - Audit Requirements, the cost of the audit must be paid from non- federal resources ( i. e., the cost of such an audit must be paid from Grantee resources obtained from other than federal entities). Part ll: State Funded 1. In the event that the Grantee expends a total amount of state financial assistance equal to or in excess of $750,000 in any fiscal year of such Grantee (for fiscal years ending June 30, DFS -A2 -CL Page - 1- Rev. 11/ 18 Rule 69I-5. 006, F.A.C. AUDIT REQu[RE viEN-Ts FOR AWARDS of STATE AND FEDERAL FINANCIAL ASSISTANCE 2017, and thereafter), the Grantee must have a state single or project -specific audit for such fiscal year in accordance with section 215.97, F.S.; Rule Chapter 691- 5, F.A.C., State Financial Assistance; and Chapters 10.550 ( local governmental entities) and 10.650 nonprofit and for-profit organizations), Rules of the Auditor General. EXHIBIT 1 to this form lists the state financial assistance awarded through the Department this agreement. In determining the state financial assistance expended in its fiscal year, the Grantee shall consider all sources of state financial assistance, including state financial assistance received from the Department, other state agencies, and other nonstate entities. State financial assistance does not include federal direct or pass-through awards and resources received by a nonstate entity for federal program matching requirements. 2. For the audit requirements addressed in Part 11, paragraph 1, the Grantee shall ensure that the audit complies with the requirements of section 215.97( 8), F. S. This includes submission of a financial reporting package as defined by section 215.97(2), F. S., and Chapters 10.550 local governmental entities) and 10. 650 (nonprofit and for-profit organizations), Rules of the Auditor General. 3. If the Grantee expends less than $ 750,000 in state financial assistance in its fiscal year (for fiscal years ending June 30, 2017, and thereafter), an audit conducted in accordance with the provisions of section 215.97, F.S., is not required. If the Grantee expends less than 750,000 in state financial assistance in its fiscal year and elects to have an audit conducted in accordance with the provisions of section 215. 97, F. S., the cost of the audit must be paid from the nonstate entity' s resources ( i. e., the cost of such an audit must be paid from the Grantee' s resources obtained from other than state entities). Part 111: Other Audit Requirements N/A Part IV: Report Submission 1. Copies of reporting packages for audits conducted in accordance with 2 CFR 200, Subpart F - Audit Requirements, and required by Part I of this form shall be submitted, when required by 2 CFR § 200.512, by or on behalf of the Grantee directly to the Federal Audit Clearinghouse (FAC) as provided in 2 CFR §200. 36 and § 200. 512. The FAC' s website provides a data entry system and required forms for submitting the single audit reporting package. Updates to the location of the FAC and data entry system may be found at the OMB website. 2. Copies of financial reporting packages required by Part 11 of this form shall be submitted by or on behalf of the Grantee directly to each of the following: a. The Department at the following address: Cybe rsecuritygra nts0d ig ital.fl. gov DFS -A2 -CL Page - 2- Rev. 11/ 18 Rule 69I-5. 006, F.A.C. AuDrr REQumEN[ENTs FOR AwARDs of STATE AND FEDERAL FINANCIAL ASSISTANCE b. The Auditor General' s Office at the following address: Auditor General Local Government Audits/342 Claude Pepper Building, Room 401 111 West Madison Street Tallahassee, Florida 32399- 1450 The Auditor General' s website (https://fiauditor.gov/) provides instructions for cling an electronic copy of a financial reporting package. I Any reports, management letters, or other information required to be submitted to the Department pursuant to this agreement shall be submitted timely in accordance with 2 CFR 200. 512, section 215.97, F.S., and Chapters 10. 550 ( local governmental entities) and 10. 650 ( nonprofit and for-profit organizations), Rules of the Auditor General, as applicable. 4. Grantees, when submitting financial reporting packages to the Department for audits done in accordance with 2 CFR 200, Subpart F - Audit Requirements, or Chapters 10. 550 (local governmental entities) and 10.650 ( nonprofit and for-profit organizations), Rules of the Auditor General, should indicate the date that the reporting package was delivered to the Grantee in correspondence accompanying the reporting package. Part V: Record Retention The Grantee shall retain sufficient records demonstrating its compliance with the terms of the award( s) and this agreement for a period of five (5) years from the date the audit report is issued, and shall allow the Department, or its designee, the CFO, or Auditor General access to such records upon request. The Grantee shall ensure that audit working papers are made available to the Department; or its designee, the CFO, or Auditor General upon request for a period of five (5) years from the date the audit report is issued, unless extended in writing by the Department. DFS -A2 -CL Page - 3- Rev. 11/ 18 Rule 69I- 5. 006, F.A.C. AUDIT REQUIREMENTS FOR AWARDS OF STATE AND FEDERAL FINANCIAL ASSISTANCE EXHIBrr 1 Federal Resources Awarded to the Grantee Pursuant to this Agreement Consist of the Following: 1. Federal Program A: N/A 2. Federal Program B: N/A Compliance Requirements Applicable to the Federal Resources Awarded Pursuant to this Agreement are as Follows: 1. Federal Program A: N/A 2. Federal Program B: N/A State Resources Awarded to the Grantee Pursuant to this Agreement Consist of the Following: Matching Resources for Federal Programs: 1. Federal Program A: N/A 2. Federal Program B: N/A Subject to Section 215.97, F. S.: 1. State Project A: Local Government Cybersecurity Grant State Awarding Agency: Florida Department of Management Services Catalog of State Financial Assistance Title and Number: 72. 016 Amount: $ 2. State Project B: N/A Compliance Requirements Applicable to State Resources Awarded Pursuant to this Agreement Are as Follows: The compliance requirements are as stated in Grant Agreement No. DMS -25/26- 148 between the Grantee and the Department, entered in State Fiscal Year 2025-26. DFS -A2 -CL Page - 4- Rev. 11/ 18 Rule 691- 5. 006, F.A.C. Purposes Grantee desires to utilize software licenses, applications, and solutions, as applicable, in connection with the attached Exhibit A — Cybersecurity Incident Response Rider and Exhibit B — Solution Rider, incorporated herein. This DSA describes the terms and conditions for the use of software licenses, applications, and solutions and protection of Covered Data, including requirements to safeguard the availability, confidentiality, and integrity of Covered Data in furtherance of the security objectives of Chapter 282, F. S. I. Definitions A. Access — The authorization to inspect, review, transmit, duplicate, communicate with, retrieve data from, or otherwise make use of any Covered Data, regardless of type, form, or nature of storage. " Access" to a computer system or network includes local and remote access, as applicable. B. Authorized Purpose — The purpose( s) for which an Authorized Third Party may access, use, or

Download this text file with its original spacing ↓