E
ელ. ტენდერი

T17877 - SECURITY ASSESSMENT AGAINST PCI 3DS STANDARDS’ REQUIREMENTS

აღწერა

შეკითხვები

შეთავაზება

რეზულტატი

შეტყობინებები

Tender Description:

Purpose of this document and therefore tender, is to select service provider for Georgian Card JSC (one of the biggest card payment processing center in Georgia), which will provide assessment services against PCI 3DS security standards’ requirements.

Purpose:

As a Level 1 Service Provider and VISANET Processor, Georgian Card JSC is willing to perform onsite or remote security assessment against PCI 3DS security standard requirements. As a result, we have decided to conduct market research in order to evaluate possible partnership in the scope of PCI 3DS security standards requirements assessment.
In this regards, we are looking for the interested VISA Approved Security Assessor (SA), 3DS Assessor (3DS), Qualified PIN Assessor and Qualified Security Assessor (QSA) companies. We are free to discuss the details regarding PCI 3DS and other PCI family standards (in specific PCI DSS, PCI PIN) for possibility of future cooperation.

Briefly about our Georgian Card JSC:

Georgian Card JSC is the leading service operator of the payment business, providing the service to the companies in Georgia since 1997. Until today, Georgian Card retains its position of the market leader: processing up to 200 operations per second for 1000 ATM-s, more than 10000 POS terminals and more than 3000 Self-Service terminals.

Scope of Work:

The bidder shall conduct an assessment of Georgian Card JSC 3DS environment against the PCI 3DS security standard. The assessment shall include the following:
Review of the 3DS environment architecture, configuration, and documentation (Georgian Card JSC 3DS environment only includes 2 components (ACS, MPI/3DSS) excluding only 1 (DS).
Assessment of the 3DS environment against the PCI 3DS requirements.
Identification of any gaps or deficiencies in the 3DS implementation.
Remediation guidance to address any identified gaps or deficiencies.
Comprehensive and user friendly compliance management portal, that allows:Upload Business as Usual (BAU) security action items needed for compliance;
- Ability to export previously uploaded action items with associated files and comments;
- Dashboard based compliance status monitoring;
- Retrieve remediation advisory documents associated with services provided;
- Submit disputes for results of services provided;
- Retrieve certificates of completion for services provided.

Full tender documentation can be rewieved in the attached files.