PCI DSS Audit

The City of St. Petersburg is seeking a vendor to conduct payment card industry (“PCI”) compliance audit using the PCI data security standards (DSS) version 4 against the City’s Cardholder Data Environment (CDE). The City of St. Petersburg’s CDE has approximately 73 total machines, which consists of 35 virtual payment stations, 32 Leisure payment stations and 6 servers across 31 facilities utilizing various wide area network connections. The City’s CDE consists of multiple departments that require compliance with the PCI DSS. The departments include but are not limited to: Utilities (Billing & Collections) and Leisure Services (Parks, Recreation).

A PCI Level 2 audit is required for organizations that process between 1 million and 6 million Visa transactions annually. This audit is crucial for ensuring compliance with the Payment Card Industry Data Security Standard (PCI DSS), which aims to protect cardholder data and reduce the risk of fraud. By undergoing a PCI Level 2 audit, the City will identify potential security vulnerabilities, implement robust security measures, and demonstrate our commitment to safeguarding sensitive financial information. This helps maintain trust with citizens, customers, and partners and avoids potential penalties and legal repercussions associated with non-compliance.