PCI Compliance Assessment

San Jacinto Community College District (SJCCD) has issued Request for Proposals (RFP #25-13) for a comprehensive Payment Card Industry (PCI) Data Security Standard compliance assessment across its campuses. The procurement seeks a qualified firm to evaluate network architecture, data security, access controls, and vendor management for all departments processing payment card transactions. The assessment will cover 26 payment card machines located across five campus locations, including 6 cafes, 17 campus business offices, 1 culinary department, and 2 cosmetology locations. Evaluation criteria include firm qualifications (15 points), personnel qualifications (15 points), scope understanding and approach (25 points), references (10 points), exceptions to terms (5 points), and price proposal (30 points). Key procurement dates include a non-mandatory virtual pre-proposal meeting on December 18, 2024, a questions deadline of January 6, 2025, and a proposal submission deadline of January 15, 2025 at 2:00 p.m. Central Time. Virtual presentations for top-ranked firms are scheduled for January 30-31, 2025, with award recommendations expected between February-March 2025, and a final compliance assessment report required by June 30, 2025.

While no specific set-aside designations are explicitly defined, the college requires contractors to track and report payments to subcontractors by supplier diversity classifications. The college currently processes payments through multiple vendors including Touchnet, Modern Campus, Transact, and TouchBistro. Pricing for the compliance assessment must be submitted as a not-to-exceed lump sum cost, with detailed breakdowns of project phases, hourly rates, travel costs, and payment schedules. Proposing firms should have demonstrated expertise in PCI DSS compliance assessments, with comprehensive understanding of payment card security standards and experience evaluating complex multi-vendor payment processing environments. The contract will run from the effective date through project completion, with the primary deliverable being a comprehensive compliance assessment report detailing findings, vulnerabilities, and recommended remediation strategies across the college's payment card infrastructure.