This Combined Synopsis/Solicitation opportunity from Department Of Defense was posted on April 23, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.
PCI DSS Compliance Technical Support
Contract Overview
Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.
Active Opportunities Like This One
AI Contract Overview
This solicitation, RFQ F41999-26-Q-0055, seeks technical support and sustainment services to achieve and maintain full Payment Card Industry Data Security Standard (PCI DSS) compliance for the Air Force Services Center’s merchant card processing operations, which account for approximately 90% of its transaction revenue. The contract is a Nonappropriated Fund Instrumentality (NAFI) action, meaning it is funded through non-federal sources and is not subject to Federal Acquisition Regulation (FAR) requirements; instead, it follows the NAF Standard Clauses dated 30 May 2025. The award will be made on a Lowest Price Technically Acceptable (LPTA) basis, with technical acceptability determined first through evaluation of the offeror’s statement of work, past performance, and risk identification, followed by price as the deciding factor among technically acceptable offerors. The period of performance begins with a 12-month base term and includes four one-year option periods, potentially extending the contract to five years. The place of performance is Joint Base San Antonio-Lackland, Texas, with physical presence required for Government Furnished Equipment handovers and on-site support, though remote work is otherwise permitted. Offerors must submit a comprehensive quotation package in Adobe PDF format, including a price quote aligned with the Statement of Objectives, formal acceptance or exceptions to the NAF Standard Clauses and Contract Administration Data, and must acknowledge receipt of all amendments. Key deliverables include weekly and monthly progress reports, quarterly Total Quality Management reports, and detailed meeting summaries, all of which must be submitted to and approved by the Contracting Officer’s Representative. Technical requirements mandate the use of modern, automated, cloud-based tools with data exportable in non-proprietary formats like CSV or JSON. Key personnel must possess certifications such as CISSP or CompTIA Security+, 3–5 years in vulnerability management, 5+ years in network infrastructure, experience with SIEM systems, and familiarity with Windows, Linux, and macOS environments, along with knowledge of modern authentication protocols and cloud security platforms. Additionally, all personnel must be eligible for a Tier 1 security clearance sponsored by the Government, and are prohibited from accessing systems requiring IAT-II or IAT-III roles. The submission deadline was extended to 4:00 PM CDT on Thursday, 7 May 2026, and all offerors must use the updated RFQ and attachments, including the revised Deliveries
General Info
Agency
NAICS
Place of Performance
DWG, TX, 78236, USASet-Aside
Timeline
Submission Closed
Organization & Contact Information
Full Description
AMENDMENT NOTICE 02: RFQ# F41999-26-Q-0055
Title: Payment Card Industry Data Security Standard (PCI DSS) Compliance Technical Support & Sustainment
Purpose of Amendment: The purpose of this amendment is to provide the updated Deliveries or Performances form.
Description of Changes:
1. REPLACE: Attachment 07 (ATCH 07) dated 8 Apr 2026 with ATCH 07 Deliveries or Performances dated 23 Apr 2026. Please use the newly uploaded version.
Instructions to Offerors:
All potential offerors must ensure they are utilizing the updated ATCH 07 in their submissions. Offerors are reminded to acknowledge receipt of this amendment in their final quotation package. All other terms and conditions of the solicitation remain unchanged.
***End Update***
AMENDMENT 01: Q&A and Extension for RFQ# F41999-26-Q-0055 (PCI DSS Technical Support)
Title: Payment Card Industry Data Security Standard (PCI DSS) Compliance Technical Support & Sustainment
Purpose of Amendment:
The purpose of this amendment is to provide Government responses to industry questions, update solicitation attachments, and extend the quotation submission deadline.
Description of Changes:
-
Questions and Answers (Q&A): The Government has posted the consolidated responses to the inquiries received prior to the 14 April 2026 cutoff. Please see the attached Q&A document.
-
Updated Attachments: Based on the Q&A, the following attachments have been revised and uploaded to this notice:
-
REPLACED: RFQ - PCI DSS Tech Support F41999-26-Q-0055. The updated form is titled Updated RFQ – PCI DSS Tech Support F41999-26-Q-0055. Please use the newly uploaded version.
-
REPLACED: Attachment 01 (ATCH 01) has been updated. The updated form is titled ATCH 01 Instructions to Contractors 20 Apr 2026. Please use the newly uploaded version.
-
REPLACED: Attachment 06 (ATCH 06) has been updated. The updated form is titled ATCH 06 Evaluations Factors – LPTA 20 Apr 2026. Please use the newly uploaded version.
-
-
Extension of Closing Date: The deadline for receipt of quotes has been extended. The new closing date and time for this RFQ is 4:00PM, CDT, Thursday, 7 May 2026.
Instructions to Offerors:
All potential offerors must ensure they are utilizing the updated RFQ, ATCH 01, and ATCH 06 in their submissions and have reviewed all Q&A responses. Offerors are reminded to acknowledge receipt of this amendment in their final quotation package. All other terms and conditions of the solicitation remain unchanged.
**End Update**
THIS IS A NONAPPROPRIATED FUND (NAF) COMBINED SYNOPSIS/SOLICITATION AND FEDERAL ACQUISITION REGULATION (FAR) RULES DO NOT APPLY. THERE IS NO REQUIREMENT FOR SET-ASIDES. NO FURTHER INFORMATION WILL BE PROVIDED OTHER THAN WHAT IS STATED BELOW.
This is a NAF purchase, and it does not obligate appropriated funds of the United States Government. This purchase does not involve federal tax dollars. This solicitation and subsequent award are in accordance with the NAF Standard Clauses (30 May 2025). The FAR clauses and provisions do not apply to NAF purchases.
This solicitation is being issued as a Request for Quote (RFQ) with an assigned solicitation number of F41999-26-Q-0055. This announcement constitutes the only solicitation. The Government is not obligated to and will not pay for quotes received as a result of this announcement.
Air Force Materiel Command’s Air Force Services Center (AFSVC), headquartered at Joint Base San Antonio-Lackland, Texas, provides critical support to military personnel and their families through Department of the Air Force (DAF) Nonappropriated Fund Instrumentalities (NAFI) across enterprise Services programs, including food, fitness, childcare, lodging, and recreation. AFSVC is responsible for developing programs, managing support functions, and responding to high-level inquiries. Merchant card processing is vital to AFSVC’s operations, accounting for ~90% of its transaction revenue. However, current merchant processing practices are not fully compliant with Payment Card Industry Data Security Standard (PCI DSS), posing risk to the security of Department of Defense connected consumer payment card data.
Your company is invited to submit a price quote to achieve a proactive, centrally governed security posture that provides Air Force Services Center (AFSVC) with full visibility into the cardholder data environment, ensures long-term verifiable PCI DSS compliance, and empowers local personnel for self-sufficient operation. AFSVC is seeking expert technical support to advance its PCI DSS compliance strategy. The Air Force Nonappropriated Fund Procurement Office (AFNAFPO) intends to award a Firm-Fixed Price contract to the offeror whose quote is the Lowest Price Technically Acceptable (LPTA). Place of Performance is JBSA Lackland, TX 78236 USA.
There is always a possibility that no award will be made as a result of this solicitation. Potential quoters will not be compensated for any costs associated with the preparation of quotes. Potential quoters are requested to keep quotes valid for a minimum of 120 days.
The following documents and information to include those outlined in ATCH 01 are required to be submitted in Adobe PDF format (if feasibly possible) for consideration for award:
- Price Quote along with a technical response to the deliverables that demonstrates a thorough understanding of all requirements of the Statement of Objectives (SOO).
- Confirmation of acceptance or exceptions to NAF Standard Clauses (30 May 2025). Ensure to physically complete paragraphs 32-34.
- Confirmation of acceptance or disagreement to Contract Admin Data (ATCH 08), paragraphs 2-4.
Method of Payment. Air Force Services Center’s preferred method of payment is by NAF Purchase Card (Visa) within 30 days of receipt of proper invoice & NAFI acceptance.
Questions and Answers (Q&A) for the Request for Information (RFI) and Pre-Solicitation Notification are attached.
Interested contractors desiring to ask additional questions related to this RFQ must submit their questions by email to Ms. Whitney Ward, whitney.ward.1@us.af.mil and Mrs. Valerie Baltimore, valerie.baltimore@us.af.mil no later than (NLT) 4:00 PM, CST, Tuesday, 14 April 2026. A consolidated list of questions and answers will be posted NLT 4:00 PM, CST, Thursday, 16 April 2026.
More opportunities from Department Of Defense → FA9000 Af Naf Po
Same awarding agency
Find Active Opportunities Like This
Get AI-powered intelligence on the opportunities still open
Every page of the solicitation package shredded into a compliance breakdown
AI-powered matching based on your capabilities and past performance
Competitor and incumbent history on the requirement
Automated alerts on amendments, Q&A deadlines, and award
Join 650+ contractors already using CLEATUS