PCI DSS Attestation contract

Description

This is a service contract with PGI for the provision of PCI DSS assessment and compliance services to support HMRC's annual PCI DSS certification requirements. The services include reviewing HMRC's payment channels (E-commerce, Telephone Payments and Point of Sale), assessing compliance against PCI DSS standards, conducting site audits where required, providing compliance advice and recommendations, and producing the necessary Reports of Compliance (ROC) and Attestations of Compliance (AOC). The contract has a value of £102,345 over a 36-month term. These contract was awarded following a direct award.