Payment Card Industry (PCI) Advisor

Trade Agreement: WTO-AGP/NAFTA/AIT/Canada-Peru
FTA/Canada-Colombia FTA
Tendering Procedures: All interested suppliers may submit a bid
Attachment: None
Competitive Procurement Strategy: N/A - P&A/LOI Only
Comprehensive Land Claim Agreement: No
Nature of Requirements: 
THIS IS NOT A SOLICITATION DOCUMENT
THIS IS A LETTER OF INTEREST (LOI)
TO SOLICIT FEEDBACK FROM INDUSTRY


The intent of this LOI is to inform industry of an upcoming
requirement that contains a security requirement at the level of
SECRET and that interested suppliers are required to obtain the
necessary clearances prior to contract award. 

Service Requirements:

The Receiver General (RG) requires the advice and knowledge
transfer of a Contractor that has an in-depth understanding of
the Payment Card Industry Data Security Standards (PCI DSS) best
practices.  While individual requirements will be specified in
each Task Authorization (TA) the RG requires one (1) Senior PCI
Advisor and up to two (2) PCI Advisors to provide the following
services on an as and when requested basis.

The qualified resources will be required to:

 Provide an in-depth review of departmental business flows and
security controls to provide PCI compliance audit readiness and
ultimately, ensure each federal department is either fully PCI
DSS compliant or has a clear timeline for compliancy;
Ensure knowledge to oversee the PCI project is transferred to
the RG PCI project office and governance body; and 
Provide guidance in the effective establishment and management
of a competitive contractual arrangement to obtain the services
of a Qualified Security Assessor (QSA), an Approved Scanning
Vendor (ASV) and / or the acquisition of PCI DSS tools.

Prohibition to Bid on Future Related Requirement:

The Contractor, during and after the period of performance of
the Contract agrees that it and its parent, subsidiaries or
other affiliates, and its subcontractors must not bid on the
future solicitation to contract the services of a Qualified
Security Assessor (QSA) and Approved Scanning Vendor (ASV), and
must not participate as an agent, subcontractor or consultant in
the preparation of any other Bidder's tender or proposal for
such requirement.

Security Requirement:

There is a Security requirement associated with this requirement
and the clause below will form part of the bid solicitation
document.  

Security Requirement for Canadian Supplier

1. 	Before award of a contract, the following conditions must be
met:

1.1	the Bidder must hold a valid organization security clearance
as indicated under 1.4 below; 

1.2	the Bidder's proposed individuals requiring access to
classified or protected information, assets or sensitive work
site(s) must meet the security requirement as indicated under
1.4 below; and

1.3	the Bidder must provide the name of all individuals who will
require access to classified or protected information, assets or
sensitive work sites.

1.4	Security Requirement

1. The Contractor must, at all times during the performance of
the Contract, hold a valid Facility Security Clearance at the
level of SECRET, with approved Document Safeguarding at the
level of SECRET, issued by the Canadian Industrial Security
Directorate (CISD), Public Works and Government Services Canada
(PWGSC).

2. The Contractor personnel requiring access to CLASSIFIED
information, assets or sensitive work site(s) must EACH hold a
valid personnel security screening at the level of SECRET,
granted or approved by the CISD, PWGSC.

3. The Contractor MUST NOT utilize its Information Technology
systems to electronically process, produce or store any
sensitive CLASSIFIED information until CISD/PWGSC has issued
written approval.  After approval has been granted, these tasks
may be performed at the level of SECRET.

4. Subcontracts which contain security requirements are NOT to
be awarded without the prior written permission of CISD/PWGSC.

5. The Contractor must comply with the provisions of the:

	(a) 	Security Requirements Check List and security guide (if
applicable);
	(b) 	Industrial Security Manual (Latest Edition). 

	 
2.	Bidders are reminded to obtain the required security
clearance promptly.  Any delay in the award of a contract to
allow the successful bidder to obtain the required clearance
will be at the entire discretion of the Contracting Authority.

3.	For additional information on security requirements, bidders
should consult the "Security Requirements for PWGSC Bid
Solicitations - Instructions for Bidders"
(http://www.tpsgc-pwgsc.gc.ca/app-acq/lc-pl/lc-pl-eng.html -
a31http://www.tpsgc-pwgsc.gc.ca/app-acq/lc-pl/lc-pl-eng.html#a31)
 document on the Departmental Standard Procurement Documents
Website.  

It is the responsibility of the interested suppliers to ensure
that the information required concerning the security clearance
is provided on time to either the requesting authority or the
Canadian Industrial Security Directorate (CISD) of  Public Works
and Government Services Canada (PWGSC).

Suppliers who currently do NOT meet the facility security
clearance requirements and (or) personnel security clearance are
advised to initiate the security clearance process immediately
by requesting sponsorship from the Contracting Authority by
e-mail at the address below.  The request must include the
following information:
		
1.	legal name of the suppliers' organization;
2.	complete address of the suppliers' organization; 
3.	telephone and fax numbers;
4.	name of President or CEO of the suppliers' organization;
5.	language preference (English or French);
6.	Supplier's Procurement Business Number (PBN). 

The Canadian and Industrial Security Directorate (CISD) of PWGSC
will then send the interested supplier the paperwork which needs
to be completed.

If the supplier wishes to propose the services of an individual
who has obtained a security clearance from a government
department or agency other than CISD/PWGSC, the supplier's
Company Security Officer is to contact CISD and request either a
transfer or a duplicate of the security clearance of the
individual.

For any inquiries concerning any security requirements,
suppliers should contact CISD at 1-866-368-4646, or (613)
948-4176 in the National Capital Region, CISD Website:
http://ssi-iss.tpsgc-pwgsc.gc.ca/

Security Requirement for Foreign Supplier

Suppliers outside Canada must contact the Contracting Authority
by e-mail (at the address below), where an appropriate security
clause will be supplied to them.

NOTE TO SUPPLIERS 

Responses

Responding to this LOI is not a prerequisite to receiving any
Request for Proposal (RFP).  However, all Suppliers are
encouraged to initiate the security screening process by
contacting the Contracting Authority and requesting sponsorship. 

The publication of this LOI must not be construed as a
commitment on Canada's part to issue a subsequent RFP for the
RG's requirement and no contract or other form of commitment
will be entered into with any Supplier based on responses to
this LOI. This LOI must in no way be considered as authorization
by Canada for Suppliers to undertake any work, which would
result in costs to Canada. Canada will not be liable for, nor
will it reimburse any Suppliers for any costs, fees or expenses
which any Supplier incurs in the preparation or submission of
its response to this LOI. Canada will not be bound by anything
stated herein. Canada reserves the right to change, at any time,
any or all parts of the requirement as it renders necessary.  


ENQUIRIES REGARDING THIS REQUIREMENT ARE TO BE SUBMITTED TO THE
FOLLOWING PWGSC CONTRACTING OFFICER:


Ingrid Harrington
Supply Specialist
Professional Services Business Initiatives Directorate
Services and Technology Acquisition Management Sector
Acquisition Branch
Public Works and Government Services Canada
Government of Canada
11 Laurier Street, Gatineau, QC, K1A 0S5
Telephone: (819)-956-3201
E-mail address: ingrid.harrington@pwgsc.gc.ca
Delivery Date: Above-mentioned

The Crown retains the right to negotiate with suppliers on any
procurement.

Documents may be submitted in either official language of Canada.