Provision of PCI-DSS Audit and ASV Scanning Services

Tender description

Provision of PCI-DSS Audit and ASV Scanning Services Lot 1: Historic Environment Scotland (HES) seeks to appoint a Qualified Security Assessor (QSA) certified by the PCI Security Standards Council to perform an independent assessment to validate compliance with the Payment Card Industry Data Security Standard (PCI DSS) across all the environments that HES operates over – eCommerce, card present and MOTO. The appointed QSA will sign-off the Attestations of Compliance and document the findings in a Report of Compliance (RoC). If non-compliance is indicated, the QSA will provide advice and guidance on how to become compliant. They will, thereafter, re-assess for compliance. In addition, the appointed supplier will also be required to undertake quarterly ASV scans of HES' eCommerce environment to help identify vulnerabilities in our internet-facing systems, such as websites and networks, that could be exploited by attackers