RFP - FPS - PCI Compliance Consulting

The City of Minneapolis is requesting proposals for PCI Compliance Consulting services supporting the Finance and Property Services department, with proposals due July 24, 2026 and a question deadline of July 10, 2026. No set-asides, preference programs, or DBE requirements are specified.

The scope encompasses comprehensive Payment Card Industry Data Security Standard compliance consulting for the City's multiple merchant entities processing credit card transactions across web, IVR, and point-of-sale channels. Deliverables include annual statements of work, gap analysis reports by merchant location, remediation action plans, individual attestations of compliance for four merchant entities, assistance with required testing and scanning, documentation development and updates, and communications planning. The City currently processes approximately 90 MasterCard/Visa merchant accounts and 75 American Express merchant accounts across nine locations, generating approximately 1.36 million transactions annually ($110 million in City revenue and $4 million for the Park Board). Current payment processors include CyberSource, Paymentus, US Bank as acquiring bank, and Elavon as processor. Vendors must provide detailed cost proposals including base fees per engagement, hourly rates, or other direct costs, along with a payment billing schedule with annual cost breakdowns.

The contract term is three years with optional annual extensions not to exceed five years total. The estimated consultant selection date is August 7, 2026, with services starting September 1, 2026. Proposals will be evaluated on quality of executive summary, alignment of scope with department objectives, consultant experience and capacity, reference reviews, staff qualifications and experience, cost of services, and vendor financial responsibility and capacity. The City reserves the right to reject any or all proposals and does not commit to accepting the lowest cost. Proposals must be submitted electronically through the City of Minneapolis eSupplier Portal. Responses to questions will be posted by July 17, 2026.