Scanning for cardholder data

Tender description

The University is working towards achieving and maintaining compliance with the Payment Card Industry Data Security Standard (PCI DSS). An important part of this exercise will be scanning our IT estate for payment cardholder data, specifically Primary Account Numbers (PANs). While none of our business processes involves storing or processing PANs on-premises we do need assurance that this has not happened in the past, and is not happening now for reasons of which the project team may be unaware. We seek proposals for scanning our technical estate for PANs and producing results that we can use to provide assurance or where necessary to initiate remediation. We are happy to consider proposals for scanning conducted as a full service, for providing the means and any necessary training for doing it for ourselves, or any blend of the two.