Penetration Testing and Vulnerability Assessment

The contract titled "Penetration Testing and Vulnerability Assessment" involves conducting both external and internal penetration testing to identify exploitable vulnerabilities within systems that handle cardholder data. This work is mandated to comply with the Payment Card Industry Data Security Standard (PCI DSS) version 4.0.1, ensuring that the organization's systems remain secure and meet industry requirements for protecting sensitive payment information. The contract is categorized under NAICS code 541512, which relates to computer systems design services. Issued by the Cherokee Nation, the contract is a subcontract opportunity posted on June 1, 2026, with a response deadline of June 5, 2026. Although specific location details for performance and contact information are not provided, the work involves formal certification activities tied to PCI DSS compliance. The primary goal is to enhance the security posture by identifying weaknesses through comprehensive penetration testing and vulnerability assessments, ultimately supporting the organization's efforts to maintain stringent data security standards.