PCI DSS Penetration Testing and Self-Assessment Questionnaire-D Services

The buyer seeks a qualified contractor to provide Payment Card Industry Data Security Standard (PCI DSS) penetration testing and Self-Assessment Questionnaire-D (SAQ-D) services. The scope requires conducting internal and external penetration testing of systems, performing segmentation testing to confirm out-of-scope networks are properly isolated from the PCI environment, coordinating testing activities across designated network segments and point-of-sale devices, and delivering regular status updates and issue escalation. Only onshore USA organizations are eligible to bid, and all work must be performed offsite. Proposers must submit all questions and clarification requests by November 13, 2026, at 5:00 PM Pacific Time. Final proposals must be submitted electronically through the PlanetBids portal by December 7, 2026, at 5:00 PM Pacific Time. A selection committee will evaluate and rank proposals using weighted criteria, including company qualifications, key personnel experience, and a cost proposal covering a five-year contract term. Cost accounts for a maximum of 20 points, with the lowest responsive total price receiving full points and remaining proposals scored proportionately.