IT Services for DLL Security Metrics and PCI Compliance Management

Project ID: 72234 State|LocalOpportunities

Overview

Agency	Vermont Office of General Services [VT]
Deadline	02/11/26
Posted	01/21/26
Estimated Value	$500,000 - $2,000,000 (AI estimate)
Set Aside	Not Provided
NAICS	Not Provided
PSC	Not Provided
Location	Vermont

Description

Primary Latest Change

You are hereby notified that the Vermont Office of Purchasing and Contracting has issued an RFP on behalf of the State of Vermont entitled: IT Services for DLL Security Metrics and PCI Compliance Management. If you are interested in submitting a bid, please go to the following web site: http://www.bgs.state.vt.us/pca/bids/bids.php Here you will find the bid documents ready to be downloaded. PLEASE BE ADVISED THAT ALL NOTIFICATIONS, RELEASES, AND AMENDMENTS ASSOCIATED WITH THIS RFP WILL BE POSTED AT: http://www.bgs.state.vt.us/pca/bids/bids.php THE STATE WILL MAKE NO ATTEMPT TO CONTACT VENDORS WITH UPDATED INFORMATION. IT IS THE RESPONSIBILITY OF EACH VENDOR TO PERIODICALLY CHECK http://www.bgs.state.vt.us/pca/bids/bids.php FOR ANY AND ALL NOTIFICATIONS, RELEASES AND AMENDMENTS ASSOCIATED WITH THE RFP. If you should have any problems in downloading the documents, you may contact me at 802-249-7394 or via e-mail at kyle.emerson@vermont.gov.

Summary (Newest Update)

Background The Vermont Office of Purchasing and Contracting is issuing a Request for Proposal (RFP) on behalf of the Department of Liquor and Lottery (DLL) to establish contracts with one or more companies for IT services related to the management of the Security Metrics application. The goal is to monitor PCI compliance across 802 Spirits retail locations, ensuring accurate network and system configurations, implementing remediation efforts, and establishing ongoing management processes. Work Details The vendor will be responsible for: 1. Full ownership and management of the Security Metrics application for PCI compliance monitoring across DLL's 802 Spirits retail locations. 2. Developing and maintaining a network configuration diagram mapping relevant applications and systems providing data to Security Metrics. 3. Updating Security Metrics to accurately represent all stores, including correct POS configurations and network associations. 4. Implementing remediation efforts for PCI compliance issues, coordinating with stores for infrastructure changes. 5. Establishing ongoing processes for continuous compliance monitoring, including monthly/quarterly checks and reporting. 6. Providing project management, including planning, scheduling, stakeholder communication, and progress reporting. Period of Performance The contract period will be for 12 months starting from April 1, 2026, with an option to renew for up to four additional twelve-month periods. Place of Performance The services will be performed at various locations associated with DLL's 802 Spirits retail locations in Vermont. Bidder Requirements Bidders must comply with specific requirements including: - Registration with the Vermont Secretary of State’s office. - Obtaining a Contractor’s Business Account Number from the Vermont Department of Taxes. - Adherence to worker classification compliance requirements. - Submission of a Certificate of Compliance. - Providing evidence of professional liability insurance coverage.

Contacts