Procurement

Mole Valley District Council - Payment Card Industry DSS Compliance

  • Mole Valley District Council

Procurement identifier (OCID): ocds-h6vhtk-05960d

Description

Mole Valley District Council ("the Council") invites tenders for the provision of Payment Card Industry (PCI) Data Security Standard (DSS) Compliance services, to be provided by a Qualified Security Assessor (QSA) as set out in these documents.

The Council provides a range of goods and services which residents and visitors to the district can purchase in person, via telephone or ecommerce in four locations, including Dorking Halls theatre and the Fairfield day centre. The Council is fully PCI DSS compliant and had a PCI audit during the last 12 months. The Council has QSA certified A, P2PE and C-VT SAQ's and AOC's, the first of which expires on 11 March 2026.

The Council requires the provision of PCI DSS consultancy from a QSA with experience of Version 4 PCI DSS compliance in local authorities or equivalent to assess the Council's compliance with the latest version of the PCI DSS, to recommend which SAQ(s) is/are most appropriate to the Council, and to provide to the Council completed and QSA certified SAQs and Attestations of Compliance (AOCs) each year during the contract period.

The Commencement Date for the delivery of the services is scheduled to be on Monday 1st December 2025 at 00:00 hours. The Contract will be awarded for a period of two years until Tuesday 30th November 2027, with an option to extend for a further one year period subject to performance and the absolute discretion of the Council.

Notices

UK7: Contract details notice

Notice identifier
2025/S 000-083521
Published
16 December 2025, 4:12pm

UK4: Tender notice

Notice identifier
2025/S 000-054754
Published
8 September 2025, 3:53pm