Qualified Security Assessor Services

The Vendor is required to provide all system components, people, processes, and technologies that store, process, or transmit cardholder data (CHD) or that can affect the security of the cardholder data environment (CDE).
- Cardholder Data Environment (CDE):
•    Systems that store, process, or transmit cardholder data.
•    Segmented environments that have direct access to the CDE.
- Connected Systems:
•    Systems with connectivity to the CDE (e.g., management systems, jump boxes).
•    Systems that can impact the security of the CDE.
- People:
•    Employees, contractors, or third-party service providers who manage, support, or have access to in-scope systems or data.
- Processes:
•    Business and IT processes involved in processing, storing, or transmitting CHD.
•    Processes that enforce or manage PCI-related security controls.
- Technology:
•    Hardware, software, virtual systems, and cloud services involved with in scope activities.

- Contract Period/Term: 2 years
- Pre-Bid Conference Date: July 29, 2025
- Questions/Inquires Deadline: August 05, 2025