QUESTIONS_&_ANSWERS_140P2119R0023_AM_0001.pdf
PDF 408 KB Posted
- Solicitation number
- 140P2119R0023
About this file
Questions & Answers
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 140P2119R0023_AMENDMENT_0001_SF_30.pdf | ||
| B08_ATT_2_PAST_PERFORMANCE_QUESTIONNAIRE.pdf | ||
| B08_140P2119R0023_COMBINED_SYNOPSIS_SOLICITATION.doc | DOC document | |
| B08_ATT_1_SCOPE_OF_WORK.doc | DOC document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Solicitation 140P2119R0023
Amendment 0001 – Questions and Answers
1. Is NPS considered a Tier 1 merchant by WorldPay and the credit card brands?
Answer: The NPS is considered a Tier 2 merchant.
2. Are NPS merchant accounts expected to be compliant or should the vendor include remediation support within scope for this effort?
Answer: Previous AOC reports have identified that the NPS merchant accounts are compliant.
3. How many merchant accounts are in-scope for this effort?
Answer: ~1100
4. Is validation of information provided by merchant accounts and testing of merchant accounts considered in-scope for this effort?
Answer: The vendor is responsible for facilitating the SAQ along with completing vulnerability scanning and penetration testing.
5. Is NPS required by WorldPay or the credit card brands to have a Qualified Security
Assessor (QSA) complete and sign an Attestation of Compliance or are is WorldPay and the credit card brands requiring NPS to provide an SAQ?
Answer: The NPS is required to have the QSA sign an AOC as well as conducting an SAQ.
6. Is NPS requiring the vendor to be a PCI Approved Scanning Vendor?
Answer: Yes
7. Does the scope of vulnerability scanning include internal and external scanning?
Answer: Vulnerability scanning for external only is within scope.
File details come from the government source that posted it.