IT Services for DLL Security Metrics and PCI Compliance Management

The State of Vermont’s Department of Liquor and Lottery is seeking a vendor to assume full ownership of its Security Metrics application, ensuring PCI‑DSS compliance across all retail liquor and lottery outlets. The contractor will manage project planning, network mapping, application configuration, remediation of PCI findings, ongoing compliance monitoring, reporting, and provide training and documentation. The effort is a 12‑month fixed‑price contract with optional four‑year extensions, payable via milestone‑based payments. • Deliver a detailed project plan within 30 days and maintain a version‑controlled network diagram of all POS environments. • Configure and validate the Security Metrics platform for each store, remediate PCI‑DSS findings, and achieve ≥ 98 % store compliance quarterly. • Provide continuous monitoring, monthly status reports, quarterly compliance reports, and 24×7 critical incident support, meeting stringent SLA targets (e.g., 99.5 % platform uptime).