RFI PCI Assessment Services - 2025

Wayne State University seeks qualified vendors to conduct a comprehensive PCI DSS assessment for its Treasury function, including gap analysis, remediation support, and possible ongoing QSA services. The university will evaluate responses to shape a future RFP and may appoint a vendor as its Qualified Security Assessor. The effort covers roughly 25 merchant IDs, ~15 Clover POS devices, virtual terminals, multiple payment gateways, and parking payment infrastructure, handling about 350,000 transactions annually. Vendors must demonstrate PCI QSA certification, relevant higher‑education experience, and provide a detailed methodology and pricing proposal. • Scope includes initial PCI DSS assessment, gap analysis, remediation assistance, and optional ongoing QSA services. • Environment comprises POS tablets (Clover Mini/Flex/Duo), printers, virtual terminals, and gateways (Cybersource, Authorize.net, Stripe, etc.) across ~25 MIDs and parking facilities. • Required deliverables: methodology, team qualifications, pricing breakdown, and compliance documentation; all submissions must be uploaded via the university’s bidding portal by June 12 2025.