PCI Remediation Advisory and Risk Management

This contract involves the development of a comprehensive risk matrix and remediation plan based on identified gaps from a security assessment, specifically targeting PCI DSS compliance requirements. The contractor is expected to provide expert guidance on addressing vulnerabilities uncovered during the assessment and assist with planning the implementation of necessary remediation measures to ensure adherence to PCI standards. The scope includes support for formal PCI DSS version 4.0.1 certification activities conducted by the Cherokee Nation. The contract is a subcontract opportunity under NAICS code 541611, focusing on management consulting services related to risk management and compliance. It was posted on June 1, 2026, with a response deadline of June 5, 2026. While specific details about the place of performance and point of contact are not provided, the work will be executed in support of the Cherokee Nation’s efforts to achieve and maintain PCI certification through advisory and practical remediation planning services.