University of Washington

Buyer seeks a vendor to provide a PCI DSS management system for eCommerce script management. The solution must meet PCI-DSS requirements 6.4.3 and 11.6.1. Buyer requires file integrity monitoring, alerting, and integration with existing SIEM systems. The system should work across federated networks and multiple domains. Vendor must provide implementation, training, and ongoing support.

• 11/14/2024 - RFP Released
• 11/27/2024 - RFP Due date for Questions
• 1/3/2025 - Proposal Due Date

• Provide script management and monitoring solution for UW eCommerce sites
• Implement file integrity monitoring and alerting service
• Integrate with existing SIEM systems (Microsoft Sentinel, Elastic stack)
• Inventory all scripts used on eCommerce sites
• Implement tamper detection for eCommerce scripts and HTTP headers
• Provide logging and alerting capabilities
• Ensure compliance with PCI-DSS requirements 6.4.3 and 11.6.1
• Provide user training for the proposed system
• Support implementation and aftercare
• Work with federated UW networks across multiple domains