Washington State University

The buyer is seeking a Qualified Security Assessor firm to provide PCI consulting services and annual assessments. The contractor will verify that University merchants meet and maintain compliance with current PCI-DSS standards. Services may include acting as an Approved Scanning Vendor. The initial contract period is expected to be three years with optional renewals.

• 1/17/2025 - Questions due
• 1/24/2025 - Last addendum issued
• 2/10/2025 - Proposal Due Date
• 5/1/2025 - Estimated contract start

• Must be a PCI Security Standards Council certified QSA
• Must have five years experience providing PCI certified QSA consulting services
• Must have PCI Compliance experience with higher education institutions
• Must be willing to conduct on-campus visits annually
• Must include three or more higher education client references

• Provide PCI-DSS consulting services
• Conduct annual PCI-DSS compliance assessment
• Provide training solutions for University merchants
• Advise on PCI-DSS compliance requirements
• Conduct quarterly external vulnerability scanning