Mole Valley District Council - Payment Card Industry DSS Compliance

Mole Valley District Council (“the Council”) invites tenders for the provision of Payment Card Industry (PCI) Data Security Standard (DSS) Compliance services, to be provided by a Qualified Security Assessor (QSA) as set out in these documents.

The Council provides a range of goods and services which residents and visitors to the district can purchase in person, via telephone or ecommerce in four locations, including Dorking Halls theatre and the Fairfield day centre. The Council is fully PCI DSS compliant and had a PCI audit during the last 12 months. The Council has QSA certified A, P2PE and C-VT SAQ’s and AOC’s, the first of which expires on 11 March 2026.

The Council requires the provision of PCI DSS consultancy from a QSA with experience of Version 4 PCI DSS compliance in local authorities or equivalent to assess the Council’s compliance with the latest version of the PCI DSS, to recommend which SAQ(s) is/are most appropriate to the Council, and to provide to the Council completed and QSA certified SAQs and Attestations of Compliance (AOCs) each year during the contract period.

The Commencement Date for the delivery of the services is scheduled to be on Monday 1st December 2025 at 00:00 hours. The Contract will be awarded for a period of two years until Tuesday 30th November 2027, with an option to extend for a further one year period subject to performance and the absolute discretion of the Council.