CanadaBuys #RFP-IT-202609-01

Toronto Parking Authority PCI DSS Compliance Assessment and Penetration Testing Solicitation

Toronto Parking Authority (TPA) is seeking a qualified security assessment firm to perform a PCI DSS v4.0.1 Compliance Assessment and Penetration Testing for its Cardholder Data Environment (CDE). - Government Buyer: - Toronto Parking Authority (TPA) - Scope of Work: - Comprehensive PCI DSS v4.0.1 compliance assessment - Penetration testing of TPA’s Cardholder Data Environment - Evaluation of effectiveness of security controls protecting cardholder data - Identification and documentation of exploitable vulnerabilities - Validation of PCI DSS v4.0.1 requirements - Preparation of compliance and assessment deliverables - Evidence-based validation and practical remediation guidance - Requirements: - Use of recognized security assessment methodologies - Clear documentation of findings and recommendations - No specific OEMs or vendors named; open to qualified security assessment firms - Contract Duration: - Estimated period of performance is 36 months

Description

The Toronto Parking Authority (TPA) is seeking a qualified and experienced security assessment firm to perform a comprehensive PCI DSS v4.0.1 Compliance Assessment and Penetration Testing engagement. The selected vendor will assess the effectiveness of controls protecting TPA’s Cardholder Data Environment (CDE), validate compliance with PCI DSS v4.0.1 requirements, identify exploitable vulnerabilities, and prepare compliance and assessment deliverables. The scope includes compliance assessment and security testing activities using recognized methodologies, evidence-based validation, clear documentation of findings, and practical remediation guidance. The contract duration is estimated to be 36 months.

View original listing