Payment Card Industry Data Security Standard Compliance Services

The government authority, located in New York, seeks a qualified vendor to provide Payment Card Industry Data Security Standard (PCI DSS) compliance services for a three-year contract period. The selected provider will assist the University in achieving and maintaining compliance with current PCI DSS requirements through policy and procedure updates, training, ongoing advisory support, and subject matter expertise.

Services will include conducting a PCI DSS gap analysis, assessing cardholder data environments, identifying vulnerabilities and compliance gaps, and providing remediation guidance. The vendor will also assist with establishing, maintaining, and managing merchant accounts, merchant IDs, and payment gateways; provide phone, email, and online support to merchants during normal business hours; and maintain electronic records of compliance activities, findings, and deliverables.

The provider may also be required to configure and maintain secure payment gateways integrated with processors, recommend secure solutions for card-present, online, and mobile payments, and prepare solution comparison reports addressing scope reduction, compliance benefits, operational fit, and cost considerations. The vendor will update policies, procedures, and training materials and create reusable templates to support future certification efforts. Questions must be submitted by August 10, 2026.