Basic Information

Reference Number

00002728409

Issuing Organization

Ontario Shared Services

Solicitation Type

NPP - Notice of Proposed Procurement (Formal)

Solicitation Number

Payment Card Industry Qualified Security Assessor

Title

Project: tender_15159 - Payment Card Industry Qualified Security Assessor

Source ID

SCRIBE

Details

Location

Ontario

Purchase Type

Not Stated

Dates

Publication

2021/08/20 01:47:00 PM EDT

Closing Date

2021/09/20 11:00:00 AM EDT

Contact Information

Kurt White

kurt.white@ontario.ca

Description

Treasury Board Secretariat (Ministry) and its PCI Enterprise Coordination Office (PCI ECO) of the Ministry wishes to procure services from an experienced Qualified Security Assessor (QSA) company whose personnel are certified by the PCI Security Standards Council to conduct PCI assessment and compliance activities, including providing the expertise and services that will enable the OPS to successfully achieve and maintain PCI compliance, and adapt to changes and best practices affecting payment card acceptance.

The QSA must be aware of the Government of Ontario’s Information and Information Technology Security Standards (GO-ITS). These are the official publications concerning the standards, policies, guidelines, technical reports and preferred practices adopted by the Government of Ontario.
Scope of Work
The services of Qualified Security Assessors are required to conduct PCI assessments, provide advisory support, present findings and lessons learned documents to Ontario Public Service (OPS). Additionally, identify gaps and advise on remediation plans and validate remediation is complete.

Assist in preparing key documents and artefacts that are required by PCI ECO to maintain PCI compliance requirements and address stakeholders needs.

Provide QSA signoff on AOC, ROC, SAQ documentation.

Assessments are expected to commence November 2021

Disclaimer All amendments to the associated notice, including amended documents, plans and specifications (where applicable), are issued by the originator of the notice. MERX asks you to contact the buying agency directly for these amendments. MERX stipulates that potential bidders may also be required to register with the buying authority as a bidder/plan taker. The contact information can be found within the main tender document and/or on this notice abstract.

Toutes les modifications associées à cet avis d’appel d’offres ainsi que les documents, les plans et les spécifications sont générés par l’entité responsable des achats (l’acheteur). S’il vous plait, contactez-le directement pour les addenda. Veuillez notez qu’il se peut que les fournisseurs soient obligés de s’inscrire directement avec l’acheteur. Vous pouvez trouver leur coordonnées dans le document principal ou dans l’abstrait de l’avis d’appel d’offre.

Source: https://ontariotenders.app.jaggaer.com/