Payment Card Industry (PCI) Compliance Validation Services

The vendor must be a 8(a) Firm that is a Qualified Security Assessor (QSA) approved by the PCI Security Standards Council.

The draft Performance Work Statement (PWS) for the services DeCA requires is attached. The primary objectives are:

PCI DSS Compliance Assessment
- Penetration Test
- External Vulnerability Scanning
- Provision of a Portal that provides DeCA with real-time status

In response to this Sources Sought Announcement (SSA), DeCA requests the following information:

1) Company Name, DUNS Number, and Point of Contact
2) Identification of whether the responding company is an ASV and QSA that is approved/qualified by the PCI Security Standards Council.
3) Company size status for NAICS 541519, Other Computer Related Services, with a size standard of $27.5M.
4) Identification of similar projects conducted for Government or Commercial entities with points of contact for reference.
5) Suggested page limit is four (4) pages.