Payment Card Industry Data Security Standards Audit Readiness.

The Department of the Air Force, through the Air Force Services Center (AFSVC), is seeking expert consulting services for Payment Card Industry Data Security Standard (PCI DSS) audit readiness and merchant processing business system maturation. This requirement is being solicited under solicitation number F41999-26-Q-0007 as a Nonappropriated Fund (NAF) purchase, meaning Federal Acquisition Regulation (FAR) rules do not apply and no federal tax dollars are obligated. The procurement is classified under NAICS 541618 Other Management Consulting Services and PSC R710 SUPPORT- MANAGEMENT: FINANCIAL. There is no requirement for set-asides for this solicitation.

The primary objective is to engage a PCI DSS compliance expert to review existing data and gap assessments for Department of the Air Force Nonappropriated Fund Instrumentalities (NAFI) cardholder environments. The contractor will refine the PCI DSS scope, identify outstanding requirements to establish an expedited compliance path, and conduct a formal audit by the end of fiscal year 2026. Furthermore, the selected vendor will provide business expertise to guide the development and maturation of end-to-end business systems and processes related to merchant processing, which accounts for approximately 90% of AFSVC transaction revenue.

Work will be performed at Joint Base San Antonio-Lackland, Texas, and responses to the Request for Quote (RFQ) are due by January 29, 2026. The solicitation includes 36 attachments, including a Statement of Objectives (SOO), evaluation factors for Lowest Price Technically Acceptable (LPTA) selection, and an amendment issued on January 14, 2026. Fay Cameron is the designated point of contact for this requirement.