PCI DSS Audit

The City of St. Petersburg is seeking a qualified vendor to perform a Payment Card Industry Data Security Standard (PCI DSS) version 4 compliance audit focused on the City’s Cardholder Data Environment (CDE). The audit aims to assess the security measures of approximately 73 machines, including virtual payment stations, leisure payment stations, and servers distributed across multiple facilities and departments such as Utilities and Leisure Services. The scope involves evaluating the security posture of various network connections and ensuring adherence to PCI DSS requirements to safeguard cardholder data. The solicitation, titled "PCI DSS Audit," was posted on August 6, 2025, with a response deadline of August 28, 2025. The contract value is estimated between $50,000 and $150,000, and the project is managed by the City of St. Petersburg, Florida. Interested vendors can contact Cortni Brzozka via email or phone for further details. The project aims to enhance the City’s payment security infrastructure and ensure compliance with industry standards to protect sensitive payment information across multiple city departments.