IT services: consulting, software development, Internet and support

Tender description

PCI DSS consultancy, validation, compliance, and data protection incident response, processor assurance and risk assessment services on a 3-year contract (with the option to extend for 1 further year). Assign a Qualified Security Assessor (QSA) (as defined by the PCI DSS) to validate compliance with the data security requirements as laid down in the PCI DSS. This will include but not be limited to: — respond to PCI related questions within fourteen (14) working days, — provision of both compliance and pre-compliance reports as required by TfL, — provision of other reports, as needed, in relation to PCI DSS compliance. Data protection incident response, processor assurance and risk assessment services. Consultancy supporting development and certification, assessment programmes including risk assessment, policy and procedure development, internal audit, incident response and investigations.