PCI DSS Compliance Technical Support
Closed Solicitation Posted
This opportunity was awarded. See the award notice from .
- Solicitation number
- F41999-26-Q-0055
- Agency
-
Air Education and Training Command
Air Force, Department of Defense
- Responses due
- Set-aside
- No set-aside
Opportunity facts
- NAICS code
- 541512 Computer Systems Design Services
- Place of performance
- Jbsa Lackland, Texas 78236, United States
Notice details come from SAM.gov. Updated .
About this opportunity
The Air Force Services Center (AFSVC) is seeking technical support services to achieve and maintain Payment Card Industry Data Security Standard (PCI DSS) compliance across its cardholder data environment, which processes 13 million annual payment card transactions across 104 worldwide installations. This nonappropriated fund (NAF) solicitation, issued by the Department of the Air Force Air Education and Training Command, requires the contractor to provide expert technical guidance, security tool implementation, vulnerability management oversight, and 24/7 operational support to ensure PCI DSS compliance at approximately 20-30 installations lacking adequate IT resources. The three-phase engagement includes a gap analysis and solution strategy (Phase 1), tools implementation and deployment support (Phase 2), and ongoing operational support and sustainment (Phase 3) spanning a 12-month base period with four optional one-year extensions. Quotes will be evaluated using a Lowest Price Technically Acceptable (LPTA) methodology based on three factors: the contractor's statement of work and technical solution (acceptable/unacceptable), past performance on similar projects within the last five years (acceptable/unacceptable), and cost/price realism and reasonableness, with price being the primary determining factor for technically acceptable proposals. The solicitation deadline is May 7, 2026, at 4:00 PM CDT, with a contract delivery date of May 31, 2027.
This NAF procurement includes no set-asides and does not obligate appropriated federal funds or tax dollars. No incumbent contractor or previous award information is identified in the solicitation documents. The contract structure is fixed-price firm pricing across base and option years, with Phase 1 deliverables due within 60 days of award and Phase 2 implementation targeting August 2026 completion to support a September 2026 PCI audit deadline. The contractor must demonstrate a minimum of five years of hands-on cybersecurity experience, hold relevant certifications such as CISSP or CompTIA Security+, obtain Tier 1 security clearance, and provide expertise in vulnerability management, SIEM systems, operating system security, cloud security, and cryptography. Performance will occur in San Antonio, Texas, with services delivered both remotely and on-site to the 104 Air Force installations, with the primary administrative office located at Joint Base San Antonio-Lackland, Texas.
Notice text
4 versions
Update #4 · Latest ·
AMENDMENT NOTICE 02: RFQ# F41999-26-Q-0055
Title: Payment Card Industry Data Security Standard (PCI DSS) Compliance Technical Support & Sustainment
Purpose of Amendment: The purpose of this amendment is to provide the updated Deliveries or Performances form.
Description of Changes:
1. REPLACE: Attachment 07 (ATCH 07) dated 8 Apr 2026 with ATCH 07 Deliveries or Performances dated 23 Apr 2026. Please use the newly uploaded version.
Instructions to Offerors:
All potential offerors must ensure they are utilizing the updated ATCH 07 in their submissions. Offerors are reminded to acknowledge receipt of this amendment in their final quotation package. All other terms and conditions of the solicitation remain unchanged.
***End Update***
AMENDMENT 01: Q&A and Extension for RFQ# F41999-26-Q-0055 (PCI DSS Technical Support)
Title: Payment Card Industry Data Security Standard (PCI DSS) Compliance Technical Support & Sustainment
Purpose of Amendment:
The purpose of this amendment is to provide Government responses to industry questions, update solicitation attachments, and extend the quotation submission deadline.
Description of Changes:
-
Questions and Answers (Q&A): The Government has posted the consolidated responses to the inquiries received prior to the 14 April 2026 cutoff. Please see the attached Q&A document.
-
Updated Attachments: Based on the Q&A, the following attachments have been revised and uploaded to this notice:
-
REPLACED: RFQ - PCI DSS Tech Support F41999-26-Q-0055. The updated form is titled Updated RFQ – PCI DSS Tech Support F41999-26-Q-0055. Please use the newly uploaded version.
-
REPLACED: Attachment 01 (ATCH 01) has been updated. The updated form is titled ATCH 01 Instructions to Contractors 20 Apr 2026. Please use the newly uploaded version.
-
REPLACED: Attachment 06 (ATCH 06) has been updated. The updated form is titled ATCH 06 Evaluations Factors – LPTA 20 Apr 2026. Please use the newly uploaded version.
-
-
Extension of Closing Date: The deadline for receipt of quotes has been extended. The new closing date and time for this RFQ is 4:00PM, CDT, Thursday, 7 May 2026.
Instructions to Offerors:
All potential offerors must ensure they are utilizing the updated RFQ, ATCH 01, and ATCH 06 in their submissions and have reviewed all Q&A responses. Offerors are reminded to acknowledge receipt of this amendment in their final quotation package. All other terms and conditions of the solicitation remain unchanged.
**End Update**
THIS IS A NONAPPROPRIATED FUND (NAF) COMBINED SYNOPSIS/SOLICITATION AND FEDERAL ACQUISITION REGULATION (FAR) RULES DO NOT APPLY. THERE IS NO REQUIREMENT FOR SET-ASIDES. NO FURTHER INFORMATION WILL BE PROVIDED OTHER THAN WHAT IS STATED BELOW.
This is a NAF purchase, and it does not obligate appropriated funds of the United States Government. This purchase does not involve federal tax dollars. This solicitation and subsequent award are in accordance with the NAF Standard Clauses (30 May 2025). The FAR clauses and provisions do not apply to NAF purchases.
This solicitation is being issued as a Request for Quote (RFQ) with an assigned solicitation number of F41999-26-Q-0055. This announcement constitutes the only solicitation. The Government is not obligated to and will not pay for quotes received as a result of this announcement.
Air Force Materiel Command’s Air Force Services Center (AFSVC), headquartered at Joint Base San Antonio-Lackland, Texas, provides critical support to military personnel and their families through Department of the Air Force (DAF) Nonappropriated Fund Instrumentalities (NAFI) across enterprise Services programs, including food, fitness, childcare, lodging, and recreation. AFSVC is responsible for developing programs, managing support functions, and responding to high-level inquiries. Merchant card processing is vital to AFSVC’s operations, accounting for ~90% of its transaction revenue. However, current merchant processing practices are not fully compliant with Payment Card Industry Data Security Standard (PCI DSS), posing risk to the security of Department of Defense connected consumer payment card data.
Your company is invited to submit a price quote to achieve a proactive, centrally governed security posture that provides Air Force Services Center (AFSVC) with full visibility into the cardholder data environment, ensures long-term verifiable PCI DSS compliance, and empowers local personnel for self-sufficient operation. AFSVC is seeking expert technical support to advance its PCI DSS compliance strategy. The Air Force Nonappropriated Fund Procurement Office (AFNAFPO) intends to award a Firm-Fixed Price contract to the offeror whose quote is the Lowest Price Technically Acceptable (LPTA). Place of Performance is JBSA Lackland, TX 78236 USA.
There is always a possibility that no award will be made as a result of this solicitation. Potential quoters will not be compensated for any costs associated with the preparation of quotes. Potential quoters are requested to keep quotes valid for a minimum of 120 days.
The following documents and information to include those outlined in ATCH 01 are required to be submitted in Adobe PDF format (if feasibly possible) for consideration for award:
- Price Quote along with a technical response to the deliverables that demonstrates a thorough understanding of all requirements of the Statement of Objectives (SOO).
- Confirmation of acceptance or exceptions to NAF Standard Clauses (30 May 2025). Ensure to physically complete paragraphs 32-34.
- Confirmation of acceptance or disagreement to Contract Admin Data (ATCH 08), paragraphs 2-4.
Method of Payment. Air Force Services Center’s preferred method of payment is by NAF Purchase Card (Visa) within 30 days of receipt of proper invoice & NAFI acceptance.
Questions and Answers (Q&A) for the Request for Information (RFI) and Pre-Solicitation Notification are attached.
Interested contractors desiring to ask additional questions related to this RFQ must submit their questions by email to Ms. Whitney Ward, whitney.ward.1@us.af.mil and Mrs. Valerie Baltimore, valerie.baltimore@us.af.mil no later than (NLT) 4:00 PM, CST, Tuesday, 14 April 2026. A consolidated list of questions and answers will be posted NLT 4:00 PM, CST, Thursday, 16 April 2026.
Update #3 ·
AMENDMENT 01: Q&A and Extension for RFQ# F41999-26-Q-0055 (PCI DSS Technical Support)
Title: Payment Card Industry Data Security Standard (PCI DSS) Compliance Technical Support & Sustainment
Purpose of Amendment:
The purpose of this amendment is to provide Government responses to industry questions, update solicitation attachments, and extend the quotation submission deadline.
Description of Changes:
-
Questions and Answers (Q&A): The Government has posted the consolidated responses to the inquiries received prior to the 14 April 2026 cutoff. Please see the attached Q&A document.
-
Updated Attachments: Based on the Q&A, the following attachments have been revised and uploaded to this notice:
-
REPLACED: RFQ - PCI DSS Tech Support F41999-26-Q-0055. The updated form is titled Updated RFQ – PCI DSS Tech Support F41999-26-Q-0055. Please use the newly uploaded version.
-
REPLACED: Attachment 01 (ATCH 01) has been updated. The updated form is titled ATCH 01 Instructions to Contractors 20 Apr 2026. Please use the newly uploaded version.
-
REPLACED: Attachment 06 (ATCH 06) has been updated. The updated form is titled ATCH 06 Evaluations Factors – LPTA 20 Apr 2026. Please use the newly uploaded version.
-
-
Extension of Closing Date: The deadline for receipt of quotes has been extended. The new closing date and time for this RFQ is 4:00PM, CDT, Thursday, 7 May 2026.
Instructions to Offerors:
All potential offerors must ensure they are utilizing the updated RFQ, ATCH 01, and ATCH 06 in their submissions and have reviewed all Q&A responses. Offerors are reminded to acknowledge receipt of this amendment in their final quotation package. All other terms and conditions of the solicitation remain unchanged.
**End Update**
THIS IS A NONAPPROPRIATED FUND (NAF) COMBINED SYNOPSIS/SOLICITATION AND FEDERAL ACQUISITION REGULATION (FAR) RULES DO NOT APPLY. THERE IS NO REQUIREMENT FOR SET-ASIDES. NO FURTHER INFORMATION WILL BE PROVIDED OTHER THAN WHAT IS STATED BELOW.
This is a NAF purchase, and it does not obligate appropriated funds of the United States Government. This purchase does not involve federal tax dollars. This solicitation and subsequent award are in accordance with the NAF Standard Clauses (30 May 2025). The FAR clauses and provisions do not apply to NAF purchases.
This solicitation is being issued as a Request for Quote (RFQ) with an assigned solicitation number of F41999-26-Q-0055. This announcement constitutes the only solicitation. The Government is not obligated to and will not pay for quotes received as a result of this announcement.
Air Force Materiel Command’s Air Force Services Center (AFSVC), headquartered at Joint Base San Antonio-Lackland, Texas, provides critical support to military personnel and their families through Department of the Air Force (DAF) Nonappropriated Fund Instrumentalities (NAFI) across enterprise Services programs, including food, fitness, childcare, lodging, and recreation. AFSVC is responsible for developing programs, managing support functions, and responding to high-level inquiries. Merchant card processing is vital to AFSVC’s operations, accounting for ~90% of its transaction revenue. However, current merchant processing practices are not fully compliant with Payment Card Industry Data Security Standard (PCI DSS), posing risk to the security of Department of Defense connected consumer payment card data.
Your company is invited to submit a price quote to achieve a proactive, centrally governed security posture that provides Air Force Services Center (AFSVC) with full visibility into the cardholder data environment, ensures long-term verifiable PCI DSS compliance, and empowers local personnel for self-sufficient operation. AFSVC is seeking expert technical support to advance its PCI DSS compliance strategy. The Air Force Nonappropriated Fund Procurement Office (AFNAFPO) intends to award a Firm-Fixed Price contract to the offeror whose quote is the Lowest Price Technically Acceptable (LPTA). Place of Performance is JBSA Lackland, TX 78236 USA.
There is always a possibility that no award will be made as a result of this solicitation. Potential quoters will not be compensated for any costs associated with the preparation of quotes. Potential quoters are requested to keep quotes valid for a minimum of 120 days.
The following documents and information to include those outlined in ATCH 01 are required to be submitted in Adobe PDF format (if feasibly possible) for consideration for award:
- Price Quote along with a technical response to the deliverables that demonstrates a thorough understanding of all requirements of the Statement of Objectives (SOO).
- Confirmation of acceptance or exceptions to NAF Standard Clauses (30 May 2025). Ensure to physically complete paragraphs 32-34.
- Confirmation of acceptance or disagreement to Contract Admin Data (ATCH 08), paragraphs 2-4.
Method of Payment. Air Force Services Center’s preferred method of payment is by NAF Purchase Card (Visa) within 30 days of receipt of proper invoice & NAFI acceptance.
Questions and Answers (Q&A) for the Request for Information (RFI) and Pre-Solicitation Notification are attached.
Interested contractors desiring to ask additional questions related to this RFQ must submit their questions by email to Ms. Whitney Ward, whitney.ward.1@us.af.mil and Mrs. Valerie Baltimore, valerie.baltimore@us.af.mil no later than (NLT) 4:00 PM, CST, Tuesday, 14 April 2026. A consolidated list of questions and answers will be posted NLT 4:00 PM, CST, Thursday, 16 April 2026.
Update #2 ·
*** INFORMATIONAL UPDATE: 16 APRIL 2026 ***
NOTICE OF Q&A DELAY AND INTENT TO EXTEND SOLICITATION
The Government received over 100 questions in response to this RFQ prior to the cutoff date of 4:00 PM CST, Tuesday, 14 April 2026. We are currently processing these inquiries.
A consolidated list of questions and answers (Q&A) will be posted to this notice via a forthcoming amendment No Later Than (NLT) 4:00 PM CST, Monday, 20 April 2026.
Due to the delay in providing the Q&A, the Government intends to extend the closing date of the RFQ by 7 days. The official extension and the exact revised closing date will be established in the upcoming amendment.
Note: Until the formal amendment is published, the current solicitation terms remain unchanged.
*** END UPDATE ***
THIS IS A NONAPPROPRIATED FUND (NAF) COMBINED SYNOPSIS/SOLICITATION AND FEDERAL ACQUISITION REGULATION (FAR) RULES DO NOT APPLY. THERE IS NO REQUIREMENT FOR SET-ASIDES. NO FURTHER INFORMATION WILL BE PROVIDED OTHER THAN WHAT IS STATED BELOW.
This is a NAF purchase, and it does not obligate appropriated funds of the United States Government. This purchase does not involve federal tax dollars. This solicitation and subsequent award are in accordance with the NAF Standard Clauses (30 May 2025). The FAR clauses and provisions do not apply to NAF purchases.
This solicitation is being issued as a Request for Quote (RFQ) with an assigned solicitation number of F41999-26-Q-0055. This announcement constitutes the only solicitation. The Government is not obligated to and will not pay for quotes received as a result of this announcement.
Air Force Materiel Command’s Air Force Services Center (AFSVC), headquartered at Joint Base San Antonio-Lackland, Texas, provides critical support to military personnel and their families through Department of the Air Force (DAF) Nonappropriated Fund Instrumentalities (NAFI) across enterprise Services programs, including food, fitness, childcare, lodging, and recreation. AFSVC is responsible for developing programs, managing support functions, and responding to high-level inquiries. Merchant card processing is vital to AFSVC’s operations, accounting for ~90% of its transaction revenue. However, current merchant processing practices are not fully compliant with Payment Card Industry Data Security Standard (PCI DSS), posing risk to the security of Department of Defense connected consumer payment card data.
Your company is invited to submit a price quote to achieve a proactive, centrally governed security posture that provides Air Force Services Center (AFSVC) with full visibility into the cardholder data environment, ensures long-term verifiable PCI DSS compliance, and empowers local personnel for self-sufficient operation. AFSVC is seeking expert technical support to advance its PCI DSS compliance strategy. The Air Force Nonappropriated Fund Procurement Office (AFNAFPO) intends to award a Firm-Fixed Price contract to the offeror whose quote is the Lowest Price Technically Acceptable (LPTA). Place of Performance is JBSA Lackland, TX 78236 USA.
There is always a possibility that no award will be made as a result of this solicitation. Potential quoters will not be compensated for any costs associated with the preparation of quotes. Potential quoters are requested to keep quotes valid for a minimum of 120 days.
The following documents and information to include those outlined in ATCH 01 are required to be submitted in Adobe PDF format (if feasibly possible) for consideration for award:
- Price Quote along with a technical response to the deliverables that demonstrates a thorough understanding of all requirements of the Statement of Objectives (SOO).
- Confirmation of acceptance or exceptions to NAF Standard Clauses (30 May 2025). Ensure to physically complete paragraphs 32-34.
- Confirmation of acceptance or disagreement to Contract Admin Data (ATCH 08), paragraphs 2-4.
Method of Payment. Air Force Services Center’s preferred method of payment is by NAF Purchase Card (Visa) within 30 days of receipt of proper invoice & NAFI acceptance.
Questions and Answers (Q&A) for the Request for Information (RFI) and Pre-Solicitation Notification are attached.
Interested contractors desiring to ask additional questions related to this RFQ must submit their questions by email to Ms. Whitney Ward, whitney.ward.1@us.af.mil and Mrs. Valerie Baltimore, valerie.baltimore@us.af.mil no later than (NLT) 4:00 PM, CST, Tuesday, 14 April 2026. A consolidated list of questions and answers will be posted NLT 4:00 PM, CST, Thursday, 16 April 2026.
Update #1 ·
THIS IS A NONAPPROPRIATED FUND (NAF) COMBINED SYNOPSIS/SOLICITATION AND FEDERAL ACQUISITION REGULATION (FAR) RULES DO NOT APPLY. THERE IS NO REQUIREMENT FOR SET-ASIDES. NO FURTHER INFORMATION WILL BE PROVIDED OTHER THAN WHAT IS STATED BELOW.
This is a NAF purchase, and it does not obligate appropriated funds of the United States Government. This purchase does not involve federal tax dollars. This solicitation and subsequent award are in accordance with the NAF Standard Clauses (30 May 2025). The FAR clauses and provisions do not apply to NAF purchases.
This solicitation is being issued as a Request for Quote (RFQ) with an assigned solicitation number of F41999-26-Q-0055. This announcement constitutes the only solicitation. The Government is not obligated to and will not pay for quotes received as a result of this announcement.
Air Force Materiel Command’s Air Force Services Center (AFSVC), headquartered at Joint Base San Antonio-Lackland, Texas, provides critical support to military personnel and their families through Department of the Air Force (DAF) Nonappropriated Fund Instrumentalities (NAFI) across enterprise Services programs, including food, fitness, childcare, lodging, and recreation. AFSVC is responsible for developing programs, managing support functions, and responding to high-level inquiries. Merchant card processing is vital to AFSVC’s operations, accounting for ~90% of its transaction revenue. However, current merchant processing practices are not fully compliant with Payment Card Industry Data Security Standard (PCI DSS), posing risk to the security of Department of Defense connected consumer payment card data.
Your company is invited to submit a price quote to achieve a proactive, centrally governed security posture that provides Air Force Services Center (AFSVC) with full visibility into the cardholder data environment, ensures long-term verifiable PCI DSS compliance, and empowers local personnel for self-sufficient operation. AFSVC is seeking expert technical support to advance its PCI DSS compliance strategy. The Air Force Nonappropriated Fund Procurement Office (AFNAFPO) intends to award a Firm-Fixed Price contract to the offeror whose quote is the Lowest Price Technically Acceptable (LPTA). Place of Performance is JBSA Lackland, TX 78236 USA.
There is always a possibility that no award will be made as a result of this solicitation. Potential quoters will not be compensated for any costs associated with the preparation of quotes. Potential quoters are requested to keep quotes valid for a minimum of 120 days.
The following documents and information to include those outlined in ATCH 01 are required to be submitted in Adobe PDF format (if feasibly possible) for consideration for award:
- Price Quote along with a technical response to the deliverables that demonstrates a thorough understanding of all requirements of the Statement of Objectives (SOO).
- Confirmation of acceptance or exceptions to NAF Standard Clauses (30 May 2025). Ensure to physically complete paragraphs 32-34.
- Confirmation of acceptance or disagreement to Contract Admin Data (ATCH 08), paragraphs 2-4.
Method of Payment. Air Force Services Center’s preferred method of payment is by NAF Purchase Card (Visa) within 30 days of receipt of proper invoice & NAFI acceptance.
Questions and Answers (Q&A) for the Request for Information (RFI) and Pre-Solicitation Notification are attached.
Interested contractors desiring to ask additional questions related to this RFQ must submit their questions by email to Ms. Whitney Ward, whitney.ward.1@us.af.mil and Mrs. Valerie Baltimore, valerie.baltimore@us.af.mil no later than (NLT) 4:00 PM, CST, Tuesday, 14 April 2026. A consolidated list of questions and answers will be posted NLT 4:00 PM, CST, Thursday, 16 April 2026.
Files
Show all 20
Notice history
| Notice | Type | Posted |
|---|---|---|
| PCI DSS Compliance Technical Support & Sustainment | Award Notice | |
| This notice | Solicitation |
Similar open opportunities
| Opportunity | Agency | Set-aside | Responses due |
|---|---|---|---|
| AF NAF Commercial Purchase Card Services | Air Education and Training Command | No set-aside |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity