Search Contract Opportunities

Wsdot - Qualified Security Assessor (QSA) Services

ID: RFP 2025-0721 • State: Washington

Description

WSDOT is seeking an experienced, qualified firm to conduct annual PCI-DSS Audits. A Payment Card Industry Data Security Standard (PCI-DSS) compliance audit is an annual, formal review process used to ensure that a business is compliant with PCI-DSS and is required to process payment card transactions.
Background
The Washington State Department of Transportation (WSDOT) is issuing this Competitive Solicitation to procure Payment Card Industry Data Security Standard (PCI-DSS) audit Qualified Security Assessor (QSA) services. This initiative is part of WSDOT's commitment to ensure compliance with PCI-DSS, which is essential for processing payment card transactions and safeguarding sensitive cardholder information from theft and misuse.

Work Details
The contractor will conduct annual PCI-DSS audits, which include a formal review process assessing the security measures for protecting cardholder data both physically and digitally. The audit will evaluate IT infrastructure for vulnerabilities, firewalls, encryption, and access controls.

It will also analyze processes for handling, storing, and transmitting payment information. Comprehensive documentation evaluations of WSDOT's policies and procedures related to the PCI audit will be conducted. If compliant, a Report on Compliance (ROC) and Attestation of Compliance (AOC) will be issued to WSDOT’s merchant bank.

Period of Performance
The contract term is expected to commence upon award and will include annual audits as required by PCI-DSS standards.

Place of Performance
Services will be performed at locations designated by WSDOT within the State of Washington.

Bidder Requirements
Bidders must be certified as Qualified Security Assessors (QSA) by the PCI Council. They should provide evidence of their qualifications through required bidder information forms and references as outlined in the solicitation.
Show All

Overview

Agency
Transportation, Dept of Logo Washington Department of Transportation [WA]
Opportunity ID
RFP 2025-0721
Response Deadline
Sept. 4, 2025 Due in 40 Days
Date Posted
July 21, 2025
Est. Value Range
Experimental
$50,000 - $200,000 (AI estimate)
Agency Distribution
High
Source
Open
Source Notes
Source does not have a linkable page for this opportunity. To find the opportunity, go to the Source website listed above and search for the Opportunity ID.
On 7/21/25 Transportation, Dept of in Washington issued Wsdot - Qualified Security Assessor (QSA) Services with ID RFP 2025-0721 due 9/3/25.

Contacts

Subscribe to find 500K+ key government decision markers

Free Trial Schedule Demo

Documents

Posted documents for Wsdot - Qualified Security Assessor (QSA) Services

Classifications

NAICS
541512 - Computer Systems Design Services
541690 - Other Scientific and Technical Consulting Services
PSC
R420 - Support- Professional: Certifications And Accreditations (Other Than Educ Or Info Tech C&A)

Additional Details

System Identifier
55827
Codes
946-20 - Auditing920-02 - Access Services, Data920-13 - Advanced Authentication System Software Services (Including Maintenance and Repair)920-15 - Assessment and Profiling Services of Software600-03 - Accounting and Bookkeeping Machines (Not Data Processing)926-14 - Air Pollution Control Services (Including Data Collection Research and Development, etc.)920-03 - Application Service Provider (ASP) (Web Based Hosted)920-05 - Application, Infrastructure, Hosting and Cloud Computing Services920-04 - Applications Software (For Main Frame Systems)920-14 - Applications Software (For Minicomputer Systems)920-07 - Applications Software for Microcomputer Systems: Business, Mathematical/Statistical, Medical, Scientific, etc.920-16 - Biometric Authentication System Software Services (Including Maintenance and Repair)984-12 - Bursters, Decollators, Detachers, etc., Rental or Lease838-26 - Cabinets for Data, Frames, Runway, Cable Management, Raceway, Wire Mesh or Basket Tray, Interduct (Telecom Closets)250-18 - Cards, Tabulating, Special (For Automatic and Manual Data Processing Systems)251-18 - Cards, Tabulating, Special (For Automatic and Manual Data Processing Systems), Environmentally Certified Products250-30 - Cards, Tabulating, Standard (For EDP Systems)251-30 - Cards, Tabulating, Standard (For EDP Systems), Environmentally Certified Products984-19 - Communication Boards, Control Units, Modems, Processors and Protocol Converters, etc., Rental or Lease984-30 - Computer Accessories (Not Otherwise Classified) Rental or Lease: CRT Holders, Forms Tractors, Wrist Supports, etc.920-18 - Computer Aided Design Services920-19 - Computer Digitizing Services920-20 - Computer Output to Microfilm (COM) Processing Services939-21 - Computers, Data Processing Equipment and Accessories (Not Word Processing Equipment), Maintenance and Repair984-24 - Computers, Microcomputer, Handheld, Laptop and Notebook, Rental or Lease984-23 - Computers, Microcomputer, Rental or Lease984-26 - Computers, Mini and Mainframe, Rental or Lease984-34 - Covers and Enclosures (Acoustical and Protective) for Computer Equipment Rental or Lease690-37 - Data Acquisition Systems305-18 - Data Books and Tables, Engineering and Surveying306-18 - Data Books and Tables, Engineering and Surveying , Environmentally Certified Products920-24 - Data Conversion Services206-40 - Data Entry and Remote Job Entry Devices, Voice Activated: Voice Recognition, Voice Digitization, Speech Synthesizers, etc.204-28 - Data Entry and Remote Job Entry Devices, Voice Activated: Voice Recognition, Voice Digitization, Speech Synthesizers, etc.205-28 - Data Entry and Remote Job Entry Devices, Voice Activated: Voice Recognition, Voice Digitization, Speech Synthesizers, etc., Environmentally Certified Products920-21 - Data Entry Services920-22 - Data Preparation and Processing Services (Including Bates Coding)425-17 - Data Processing Furniture, Metal and Plastic (For Storage Cabinets See Item 87)425-18 - Data Processing Office Furniture, Wood (Not Storage Cabinets -See Item 87)208-36 - Data Processing Software, Microcomputer209-37 - Data Processing Software, Mini/Mainframe Computer920-23 - Data Recovery Services204-29 - Data/File Security Hardware/Software, to Include Encryption205-29 - Data/File Security Hardware/Software, to Include Encryption, Environmentally Certified Products209-38 - Database Software208-37 - Database Software920-26 - Desktop Publishing Services920-25 - Diskette, CD Rom, and Tape Duplicating Services984-39 - Drives, Rental or Lease: CDROM, Hard, Floppy and Tape920-27 - E-Commerce Software Development Services208-42 - EDI (Electronic Data Interchange) Translator Software, Microcomputer209-43 - EDI (Electronic Data Interchange) Translator Software, Mini/Mainframe Computer915-26 - EDI (Electronic Data Interchange) Value Added Network (VAN) Services920-17 - Electronic Forms Services920-28 - Emergency Back-up Services and Facilities for Data Processing920-29 - Facilities Management Services, Computer958-40 - Fishery Management Services (Including Data Collection, Research and Experimentation, Resources Protection, etc.)425-47 - Floors, Raised Access Type (For Data Processing Equipment)726-47 - Frequency Data Communication Equipment, Radio (Including Identification Equipment)915-44 - Fulfillment (Includes. Data Processing, Packaging, Labeling and Mailing of Literature as a Package)990-48 - Identity Theft Protection and Data Security Services920-30 - Image Processing and Conversion Services920-31 - Installation of Computers, Peripherals, and Related Equipment (Including Software)920-32 - Intelligent Transportation System Software (To Include Design, Development, and Maintenance Services)956-35 - Internet Database Subscriptions220-34 - Logging Devices, Electronic (Long-Range Data Collection and Recording for Use at a Remote Location)920-33 - Mapping Services, Digitized, Cartography (See 962-52 for Standard Mapping Services)920-34 - Media Conversion Services206-59 - Modems, External Data Communications204-58 - Modems, External, Data Communications205-58 - Modems, External, Data Communications, Environmentally Certified Products920-35 - Modification of Existing Equipment (Including Cost of Parts)920-37 - Networking Services (Including Installation, Security, and Maintenance)920-38 - Optical Scanning Services250-55 - Paper, Tabulating Stock251-55 - Paper, Tabulating Stock, Environmentally Certified Products968-62 - Pavement Data Collection Services845-49 - Pavement Testing and Data Collection Equipment984-54 - Peripheral Miscellaneous Rental or Lease: Keyboards, Mice, Monitors, etc.984-57 - Power Supplies Rental or Lease: Surge Protectors, UPS, etc.984-60 - Printers and Plotters, Computer (All Types), Rental or Lease920-39 - Processing System Services, Data (Not Otherwise Classified)920-40 - Programming Services, Computer (Including Mobile Device Applications)920-42 - Recertification/Rehabilitation of Magnetic Media (Disk Packs, Tapes, etc.)920-43 - Recharging and Remanufacturing of Printer and Fax Cartridges250-67 - Recycled Data Processing Cards and Paper251-67 - Recycled Data Processing Cards and Paper, Environmentally Certified Products832-95 - Recycled Tape920-41 - Retrieval Services, Information610-56 - Ribbons, Computer and Data Processing, All Types (For Tab See 610-73)920-44 - Risk Management for Software Development250-70 - Roll Paper, Bond (For EDP Portable Terminals)251-70 - Roll Paper, Bond (For EDP Portable Terminals), Environmentally Certified Products250-72 - Roll Paper, Thermal (For EDP Portable Terminals)251-72 - Roll Paper, Thermal (For EDP Portable Terminals), Environmentally Certified Products984-83 - Scanner and Reader Rental or Lease204-91 - Servers, Microcomputer (Application, Database, File, Mail, Network, Web, etc)205-91 - Servers, Microcomputer (Application, Database, File, Mail, Network, Web, etc), Environmentally Certified Products206-87 - Servers, Mini/Mainframe Computer (Application, Database, File, Mail, Network, Web, etc.)984-84 - Servers, Rental or Lease920-51 - Shredding Services, Computer Components and Peripherals920-50 - Shredding Services, Computer Components and Peripherals920-45 - Software Maintenance/Support920-46 - Software Updating Services425-87 - Storage Cabinets, Data Processing920-48 - Storage Services, Data Media920-47 - Support Services, Computer (Includes Computer Warranties)920-64 - System Implementation and Engineering Services920-65 - System Requirements Quality Assurance Review920-66 - System/Network/Database Administration Services920-49 - Systems/Executive Software, Main Frame920-56 - Systems/Executive Software, Microcomputer920-63 - Systems/Executive Software, Minicomputer832-55 - Tape (Not Otherwise Classified)832-02 - Tape, Anti-Seizing832-03 - Tape, Anti-Skid832-04 - Tape, Athletic832-05 - Tape, Automotive Type832-10 - Tape, Barrier (Includes Cautionary and Crime Scene Tape)832-20 - Tape, Cellulose: Drafting, Labeling, Magnetic, etc.832-22 - Tape, Cloth, Mending832-23 - Tape, Detectable Marking832-24 - Tape, Duct, Adhesive Type832-26 - Tape, Electrical832-27 - Tape, Epoxy832-28 - Tape, Filament832-30 - Tape, Freezer/Freeze Protection832-29 - Tape, Glass Setting832-32 - Tape, Gummed Kraft and Reinforced Paper832-36 - Tape, Insulating, All Types (Except Electrical)832-40 - Tape, Insulating, Electrical832-44 - Tape, Labeling, Library Type832-48 - Tape, Marking, Reflective Adhesive-Backed (See 550-72 for Pavement Marking Tape)832-52 - Tape, Masking832-54 - Tape, Metal Repair832-56 - Tape, Nuclear Radiation832-60 - Tape, Nylon832-62 - Tape, Pipe Banding832-63 - Tape, Polypropylene832-64 - Tape, Roofing: Rubber, etc.832-68 - Tape, Sheetrock832-69 - Tape, Sign832-72 - Tape, Thread, Teflon832-74 - Tape, Vinyl832-75 - Tape, Wire and Cable Marking and Accessories832-76 - Tape, Wood, All Kinds920-75 - Technical Writing and Documentation, IT Services920-77 - Teleprocessing Via Proprietary Data Bases920-84 - Teleprocessing, Business (Timesharing)920-90 - Teleprocessing, Scientific, Industrial, Medical, etc. -Timesharing206-93 - Terminals and CRTs: Data Processing Systems204-93 - Terminals and CRTs: Data Processing Systems205-93 - Terminals and CRTs: Data Processing Systems, Environmentally Certified Products984-87 - Terminals, CRTs and Remote Job Entry Devices Rental or Lease920-76 - Testing of Systems Infrastructure, Components or Software, IT Services250-80 - Tests, Answer Sheets, Scoring Keys, etc. (For EDP Systems)251-80 - Tests, Answer Sheets, Scoring Keys, etc. (For EDP Systems), Environmentally Certified Products195-67 - Time and Attendance Data Collection Systems920-91 - Training, Computer Based (Software Supported)550-90 - Transportation Systems, Intelligent (An automated information system which provides traffic management, communications, and analysis of data as a minimum)600-89 - Typewriters, Memory: Typewriters with Memory for Data Storage and Retrieval (Not Microcomputer System Style)915-97 - Wiring Services, Data/Voice984-92 - Word Processing Equipment Rental or Lease920-94 - Word Processing Software, Main Frame920-95 - Word Processing Software, Microcomputer920-96 - Word Processing Software, Minicomputer
Counties
Adams, Asotin, Benton, Chelan, Clallam, Clark, Columbia, Cowlitz, Douglas, Ferry, Franklin, Garfield, Grant, Grays Harbor, Island, Jefferson, King, Kitsap, Kittitas, Klickitat, Lewis, Lincoln, Mason, Okanogan, Pacific, Pend Oreille, Pierce, San Juan, Skagit, Skamania, Snohomish, Spokane, Stevens, Thurston, Wahkiakum, Walla Walla, Whatcom, Whitman, Yakima
Estimated Value
110000

Similar Active Opportunities