PCI DSS Compliance Assessment and Remediation

The contract entails a comprehensive assessment and remediation of PCI DSS compliance for systems that process donor credit card information, ensuring adherence to industry security standards. This includes conducting vulnerability scans to identify security weaknesses, reviewing existing security policies and procedures for alignment with PCI DSS requirements, and delivering a formal Report on Compliance that validates the organization’s security posture. The work is critical to safeguarding sensitive donor data and maintaining trust and regulatory compliance within the organization’s payment processing environment. This subcontract, issued by the University of Arkansas System under NAICS code 541512 for Computer Systems Design Services, is designed to be performed in Arkansas with no set-aside provisions specified. The solicitation was posted and has the same response deadline of August 10, 2026, indicating a potential error or placeholder in the timeline, as the deadline coincides with the posting date. Interested parties must respond through the provided online portal at hogbid.uark.edu, with no point of contact or physical address listed. The scope focuses exclusively on achieving and documenting PCI DSS compliance without additional contractual obligations beyond the assessment, remediation, and reporting deliverables.