POS PCI Audit -Pasco County

By | April 15, 2020
Payment Card Industry Audit. It is the intent of this solicitation to contract with a Professional Consultant to preform audits for payment card industry data security standards, as per specifications.

SCOPE
1.1 The Information Technology Department is requesting services from a Professional Consultant (Consultant) to preform audits related for Payment Card Industry (PCI) Data Security Standards (DSS).

GENERAL REQUIREMENTS
2.1 All PCI compliance services shall be performed by a Qualified Security Assessor (QSA).
2.2 The Consultant shall provide PCI DSS self-assessment questionnaire trainings, support, and reviews for merchants and service providers.
2.3 The Consultant shall provide PCI DSS advisory services for merchants and service providers.
2.4 The Consultant shall provide PCI DSS gap analysis for merchants and service providers.
2.5 The Consultant shall provide PCI DSS onsite audits resulting in a report on compliance for merchants and service providers.
2.6 The Consultant shall provide PCI DSS remediation advisory services for merchants and service providers.
2.7 The Consultant shall provide security policy review as it relates to PCI DSS compliance.
2.8 The Consultant shall provide merchant and service provider risk assessment advisory services.
2.9 The Consultant shall provide Point-to-Point Encryption (P2PE) gap analysis.
2.10 The Consultant shall provide P2PE implementation advisory services.
2.11 The Consultant shall provide consulting and advisory services for the development and implementation of PCI environments, applications, and services.
2.12 The Consultant shall provide any other QSA services necessary to conform to PCI standards that are not specifically mentioned.
2.13 The Consultant shall perform onsite visits to visually inspect the credit card terminals.
2.14 The Consultant shall provide training and assist in completing Pasco County’s Self-Assessment Questionnaire (SAQs).
2.15 The Consultant shall provide Pasco County with an Attestation of Compliance (AOC).
2.16 AOC shall be completed no later than 8/28/2020.
2.16.1 If the Consultant cannot provide the AOC by the time listed in these specifications, they must contact the Pasco County Representative (PCR).
2.17 All travel expenses must be included in the total cost of their proposal.

Broadcast Date 4/13/2020 7:00 PM
Question End Date
Due Date 4/28/2020 1:00 PM