University of Washington

The buyer is seeking a vendor to provide a PCI DSS Management System. The system should offer script management and monitoring for eCommerce sites to meet PCI-DSS requirements. The solution must include file integrity monitoring, alerting services, and integration with existing SIEM systems. The vendor will be responsible for implementation, user training, and ongoing support.

• 11/14/2024 - RFP Released
• 11/27/2024 - RFP Due date for Questions
• 1/3/2025 - Proposal Due Date

• Provide script management and monitoring solution for UW eCommerce sites
• Implement file integrity monitoring and alerting service
• Integrate with existing UW SIEM systems (Microsoft Sentinel, Elastic stack)
• Inventory all scripts used on eCommerce site with notes
• Confirm scripts are authorized and detect unauthorized changes
• Implement tamper detection for eCommerce scripts and HTTP headers
• Provide logging and alerting of events
• Ensure compliance with PCI-DSS requirements 6.4.3 and 11.6.1
• Provide user training for the proposed system
• Support implementation and provide aftercare support