EXTRA-73913 - USA (New York) - Payment Card Industry Data Security Standard Compliance Services - Deadline August 26,2026

(1) Vendor needs to provide payment card industry (PCI) data security standard (DSS) compliance services to the government authority located in New York.– Assist the University in achieving and maintaining compliance with the current PCI, including policy and procedure updates, training, and ongoing advisory support.– Perform a PCI DSS gap analysis and provide remediation guidance for the University’s cardholder data environment.– Assist with the establishment, maintenance, and management of merchant accounts, merchant IDs, and Payment Gateways.– Provide subject matter expertise and guidance to the University.– Provide support on other related matters as needed.– Provide phone, email, and online support assistance to merchants during normal business hours.– Conduct continuous research and discovery to identify vulnerabilities or compliance gaps within merchant environments.– Update University policies, procedures, and training materials to align with current PCI DSS.– Create reusable templates to streamline future certification efforts.– Assess new and existing payment card environments for compliance and providing recommendations to address vulnerability gaps.– Maintain electronic records of all compliance activities, findings, and deliverables.– Assist with Payment Gateways (as needed): Set up, configure, and maintain secure payment gateways integrated with processors.– Recommend secure solutions for card–present, online, and mobile payments.– Provide detailed solution comparison reports outlining scope reduction impact, compliance benefits, operational fit, and cost considerations.(2) All questions must be submitted no later than August 10, 2026.(3) The contract period will be for three years.