PCI DSS Compliance for Payment Handling

The contract requires all third-party providers and integrated systems handling cardholder data to maintain full compliance with the Payment Card Industry Data Security Standard (PCI DSS). This includes implementing and sustaining security controls to protect sensitive payment information, conducting quarterly vulnerability scans to identify and remediate potential security weaknesses, and submitting an annual attestation of compliance to affirm adherence to all applicable PCI DSS requirements. Compliance is mandatory for any entity involved in the processing, storage, or transmission of cardholder data under this agreement. The contract is classified as a subcontract issued by the University of Arkansas Fayetteville under NAICS code 541990, and it was posted with a response deadline on the same date as the posting, indicating an immediate or time-sensitive procurement. The place of performance and point of contact details are unspecified, but the obligation to comply with PCI DSS applies regardless of geographic location. All parties engaged under this contract must ensure their systems and processes meet industry-wide security benchmarks, with enforcement and verification conducted through regular scanning and formal certification. Access to detailed submission instructions is available through the provided university bidding portal.