Payment Card Industry Qualified Security Assessor (PCI QSA)

Treasury Board Secretariat (Ministry) and its PCI Enterprise Coordination Office (PCI ECO) of the Ministry is seeking to procure services from an experienced Qualified Security Assessor (QSA) company whose personnel are certified by the PCI Security Standards Council to conduct PCI assessment and compliance activities, including providing the expertise and services that will enable the Ontario Public Service (OPS) to successfully achieve and maintain PCI compliance, and adapt to changes and best practices affecting payment card acceptance.

The QSA must be aware of the Government of Ontario’s Information and Information Technology Security Standards (GO-ITS). These are the official publications concerning the standards, policies, guidelines, technical reports and preferred practices adopted by the Government of Ontario.