PCI DSS Standards.html

HTML file 224 KB Posted

Attached to
Equipment Distribution Program
Solicitation number
005-RFP-1302-2025
Issued by
Polk County, Des Moines City, Iowa

About this file

This file is a standards overview webpage from the PCI Security Standards Council, a global organization founded in 2006 by American Express, Discover, JCB International, Mastercard, and Visa Inc. to establish and promote Payment Card Industry security standards. The PCI Security Standards Council maintains and evolves multiple standards designed to protect cardholder data, including the PCI Data Security Standard (PCI DSS), Point-to-Point Encryption (P2PE), Secure Software Lifecycle (Secure SLC), and various other payment security frameworks. The webpage serves as a comprehensive resource directory for merchants, financial institutions, point-of-sale vendors, and software developers, offering access to standard documents, training programs, professional qualification listings, approved products and solutions, and industry events. The Council's primary mission focuses on helping merchants and financial institutions understand and implement security policies and technologies that protect payment systems from breaches, while also assisting vendors in creating secure payment solutions.

The related Iowa Department of Administrative Services contract opportunity pertains to the Equipment Distribution Program, which seeks a respondent to provide new Mercedes Benz Sprinter Vans or equivalent for the Iowa Department of Public Safety. The contract has an initial term of one year with options to renew for up to five additional one-year terms. Respondents must manage application processing, voucher management, statewide outreach, reporting, and complaint resolution, with pricing to include one-time and recurring costs for services and equipment on a Net 60 Days payment basis. The RFP indicates a preference for Iowa-based respondents and providers of Iowa-produced goods, though no set-aside designations or budget amounts are specified. No information regarding incumbent vendors, existing infrastructure, award dates, or specific response deadlines is provided in the available documentation.

Text of this file

Contact Us

Log In

FAQs

X-twitter

Linkedin-in

Instagram

Youtube

Blog

Envelope

Search

EN

English

Français

Español

日本語

Deutsch

Português

中文

Standards

Discover the range of PCI Security Standards and where to find additional resources.

Standards overview

Standards Overview

PCI Data Security Standard (PCI DSS)

Point-to-Point Encryption (P2PE)

Secure Software

Secure Software Lifecycle (Secure SLC)

PTS Point of Interaction (POI)

PIN Security

Card Production and Provisioning - Logical

Card Production and Provisioning - Physical

PCI 3DS Core

PCI 3DS SDK

Mobile Payments on COTS (MPoC)

Contactless Payments on COTS (CPoC)

Software-based PIN Entry on COTS (SPoC)

PTS Hardware Security Module (HSM)

Token Service Provider (TSP)

Payment Application Data Security Standard (PA-DSS) – Retired

PCI Qualified Professionals

Verify or search for a PCI Qualified Professional. Select the qualification that best suits your needs.

PCI Qualified Professionals Overview

Program Listings Overview

3DS Assessors

Approved Scanning Vendors

Card Production Security Assessors

Internal Security Assessors

Point-to-Point Encryption Assessors

Qualified PIN Assessors

Qualified Security Assessors

Secure Software Assessors

Secure Software Lifecycle Assessors

PCI Forensic Investigators

PCI Professionals

Qualified Integrator and Resellers

PCI Recognized Laboratories

Assessor & Vendor Feedback Forms

Verify a Professional

Products & Solutions Listings

Locate approved devices and payment solutions for use at the point of sale, and point-to-point encryption solutions to protect cardholder data.

Product & Solutions Listings Overview

Product & Solutions Listings Overview

3DS Software Development Kits

Approved PTS Devices

Validated Payment Software

Secure SLC Qualified Software Vendors

Payment Applications (PA-DSS)

PCI PIN Service Provider List

Point-to-Point Encryption Solutions

MPoC Solutions

SPoC Solutions

CPoC Solutions

Training

Learn more about PCI SSC’s Training & Qualification programs, class schedules, registration information, corporate group training and knowledge training.

Training & Qualification Overview

Training & Qualification Overview

3DS Assessor Training

Approved Scanning Vendor Training

Associate QSA Training

Card Production Security Assessor Training

Internal Security Assessor Training

PCI Awareness Training

PCI Forensic Investigator Training

PCI Professional Training

P2PE Assessor Training

Qualified Integrator and Reseller Training

Qualified PIN Assessor Training

Qualified Security Assessor Training

Secure SLC Assessor Training

Secure Software Assessor Training

Working From Home: Security Awareness Training

Training Class Schedule

Corporate Group Training

Knowledge Training

Programs Fee Schedule

Meet The Training Team

Credly Digital Badging

Continuing Professional Education

Events

Attend PCI SSC upcoming Community Meetings, programs, webcasts, and industry events where we are speaking.

Events Calendar & Overview

Events Calendar & Overview

Community Meetings

Forums

Past Events/Photo Galleries

Get Involved

Get involved with PCI SSC and help influence the direction of PCI Standards.

Overview

Join Us

Overview

Ways to Participate

Principal Participating Organization

Associate Participating Organization

Individual Participant

Request For Comments

Special Interest Groups (SIGs)

2026-2027 Brazil Regional Engagement Board

News

View the latest news, announcements, and resources from PCI SSC.

Newsroom

Newsroom

Press Releases

PCI Perspectives Blog

Coffee with the Council Podcast

Industry Bulletins

Media Coverage

Join Our Mailing List

Resources

Access PCI SSC standard and program documents and payment security resources.

Resources Overview

Resources Overview

Document Library

FAQs

Global Content Library

Standards

Merchant Resources

PCI SSC Glossary

PCI Perspectives Blog

PCI SSC Portal

PCI Security Essentials

PCI SSC Threat Center

Brand Style Guide

Order Quick Reference Guides

About

Get to know the PCI Security Standards Council.

Who we are

Who we are

PCI SSC Leadership

Board of Advisors

Affiliate Members

Strategic Members

Principal Participating Organizations

Participating Organization Directory

Regional Engagement

— Brazil

— India-South Asia

Global Executive Assessor Roundtable (GEAR)

Careers at PCI SSC

Policies

Contact Us

PCI Security

The PCI Security Standards Council touches the lives of hundreds of millions of people worldwide. A global organization, it maintains, evolves and promotes Payment Card Industry standards for the safety of cardholder data across the globe.

Who We Serve

We serve those who work with and are associated with payment cards. This includes: merchants of all sizes, financial institutions, point-of-sale vendors, and hardware and software developers who create and operate the global infrastructure for processing payments.

What We Do

There are two priorities for our work:

Helping merchants and financial institutions understand and implement standards for security policies, technologies and ongoing processes that protect their payment systems from breaches and theft of cardholder data.

Helping vendors understand and implement standards for creating secure payment solutions.

“Over the course of several years now, the PCI Security Standards Council has done a laudable job at defining and evolving a cohesive set of standards, as well as at listening and adapting over time to the feedback from merchants, banks, payment processors, service providers, and technology providers.”

- Derek Brink, Vice President and Research Fellow, Aberdeen Group

The Council was founded in 2006 by American Express, Discover, JCB International, Mastercard and Visa Inc. They share equally in ownership, governance, and execution of the Council's work.

Useful Links

Security Matters

From customers to merchants and financial institutions, the security of cardholder data affects everybody. Discover how securing cardholder data can help preserve customer trust, ensure compliance, and benefit your organization in the long term.

Get the details

The PCI Security Standards

Maintaining payment security is required for all entities that store, process or transmit cardholder data. Guidance for maintaining payment security is provided in PCI security standards. These set the technical and operational requirements for organizations accepting or processing payment transactions, and for software developers and manufacturers of applications and devices used in those transactions.

See the standards

How to Secure

Following guidance in the PCI Data Security Standard helps keep your cyber defenses primed against attacks aimed at stealing cardholder data.

Learn how to secure

Assessing the Security of Your Cardholder Data

Most small merchants can use a self-validation tool to assess their level of cardholder data security. The Self-Assessment Questionnaire includes a series of questions for each applicable PCI Data Security Standard requirement. There are different SAQs available for a variety of merchant environments.

Take the self assessment

Loading

About Us

Who We Are

Leadership

Careers

FAQs

Training

Our Programs

Class Schedule

Get Involved

Participating Organizations

Affiliated Members

Request for Comments

Special Interest Groups

News & Events

Newsroom

Events

PCI Perspectives Blog

Contact

Press Contacts

Contact Us

X-twitter

Linkedin-in

Instagram

Youtube

Blog

Copyright © 2006 – 2024 PCI Security Standards Council, LLC. All rights reserved. Terms and Conditions.

Association Management services provided by Virtual, Inc.

Antitrust Policy

Privacy Policy

IPR Policy

English

Français

Español

日本語

Deutsch

Português

中文

Other files

Show all 13

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

File details come from the government source that posted it. Updated .