ITES-11162 - USA (San Diego, California) - Payment Card Industry Compliance Program and Information Security Services - Deadline December 14,2026

(1) Vendor needs to provide PCI compliance program and information security services to the government authority located in San Diego, CA.• Advisory support for PCI related remediation activities, as needed• Review and assessment of PCI related policies, procedures, and standards• Change driven PCI impact assessments for new systems, vendors, applications, orsignificant modifications to existing environments• Periodic compliance status meetings and reporting• PCI Advisory and Specialized PCI Services – Advisory review of current PCI agency controls and future dated requirements– Guidance on compensating controls and customized approaches– Advisory support for segmentation, encryption, and scope reduction strategies– Review of third party and service provider PCI compliance artifacts– Support for attestations, executive briefings, and regulatory inquiries• Cybersecurity Services (As Needed)– Cybersecurity Services may include, but are not limited to:– Cybersecurity program assessments and maturity evaluations– Enterprise and system level security risk assessments– Threat modeling and architectural risk analysis– Development or review of cybersecurity policies, standards, and procedures– Vulnerability management program advisory and tuning– Incident response planning, testing, and tabletop exercises– Third party and supply chain security risk assessments– Security awareness and role–based training– Alignment with industry frameworks(2) The contract period will be for five years.(3) All the questions must be submitted no later than November 12, 2026.(4) Pre–bid meeting will be held on November 4, 2026.