Request For Proposals ( RFP ) For Qualified Security Assessor (QSA) to provide Payment Card Industry (PCI) Services

  Please refer to the solicitation document for specific bid submission instructions. SOLICITATION #:  6000002310 TITLE:  Request For Proposals (“RFP”) For Qualified Security Assessor (QSA) to provide Payment Card Industry (PCI) Services. DESCRIPTION:  The Port Authority of New York and New Jersey is requesting the services of a qualified PCI information security and compliance services firm to conduct PCI compliance assessments that will accurately evaluate payment / credit card security processes, processes that can impact the security of the Cardholder Data Environment, and controls consistent with applicable PCI Data Security Standards (DSS) requirements and testing procedures; with a Gap Analysis and recommendations for meeting the gaps identified; assist with recommending corrections and/or compensating controls to address all discovered areas of non-compliance and control weaknesses during the assessment; certify compliance with 4.0 PCI DSS, and complete delivery of necessary documents including an Attestation of Compliance and Report on Compliance (ROC).  The Port Authority (PA) requires an annual organization-wide Attestation of Compliance (AOC) to be filed with its merchant bank and/or made available to organizations where the PA is a third-party service provider.  The Proposer will conduct assessments of different payment channels using the applicable Self-Assessment Questionnaire (SAQ) to provide the PA its PCI DSS certification Attestation of Compliance for Merchant Bank, an Attestation of Compliance (AOC) for Service Provider, an Initial Report on Compliance (internal ROC), and a final ROC.    The Proposer will provide subject matter expertise to determine the applicable SAQ for each PA payment channel, provide guidance to the Agency’s internal PCI compliance team for assessment planning, and make available necessary documentation to satisfy PCI reporting requirements.  DUE DATE:  08/26/2024 NIGP CODE(S):    94635: Credit Card, Charge Card Services The Port Authority of New York and New Jersey (Port Authority), in accordance with the provisions of Title VI of the Civil Rights Act of 1964 (78 Stat. 252, 42 USC §§ 2000d to 2000d-4) and the Regulations, hereby notifies all bidders or offerors that it will affirmatively ensure that for any contract entered into pursuant to this advertisement, businesses will be afforded full and fair opportunity to submit bids in response to this invitation and no businesses will be discriminated against on the grounds of race, color, national origin (including limited English proficiency), creed, sex (including sexual orientation and gender identity), age, or disability in consideration for an award. Additionally, all bidders (including proposers, and respondents, as applicable) are notified that the Port Authority will ensure that, with respect to any contract/agreement entered into pursuant to this advertisement, disadvantaged business enterprises, minority business enterprises and woman-owned business enterprises, as applicable, will be afforded full and fair opportunity to submit bids, proposals and responses, as applicable, in response to this invitation, and will not be discriminated against on the grounds of race, color, or national origin in consideration for an award.  The solicitation document is available on-line at http://www.panynj.gov/business-opportunities/bid-proposal-advertisements.html?tabnum=5. Addenda to the Bid, if any, will be posted at this website. Monitor the advertisement on the website to ensure your awareness of any changes. If you have any technical problems accessing the documents online, email us at contact@example.gov or call us at +1 (555) 000-0000 for assistance. Service-Disabled Veteran-Owned Set Aside: No Due date:08/26/2024 2:00 PM See Document Contract term: SEE DOCUMENT County(ies): All NYS counties Location: See Document Business entities awarded an identical or substantially similar procurement contract within the past five years: None