Purpose of RFP. The purpose of this Request for Proposals (RFP) is to solicit proposals to enter into a contract with a qualified vendor to complete a Report on Compliance (ROC) in regard to PCI Compliance, PCI DSS v4.0.1, Revision 1.0, and Penetration Testing Services for the University of Utah, hereafter referred to as the "University." The companies submitting proposals in response to this RFP will hereafter be referred to as “Vendor.” The University is examining several alternatives of providing this service and may decide, after reviewing proposals submitted, not to enter into any agreement.
1.02 Background. The University of Utah is the largest public university in Utah with over 31,000 students and 15,000+ faculty and staff. The university was founded in 1850 and is based in Salt Lake City. The university supports over 100 major subjects at the undergraduate level and more than 90 major fields of study at the graduate level. The university has a number of different businesses throughout the campuses and healthcare facilities that accept credit card payments. These businesses include the arts, sporting events, retail, food and beverage, e-commerce, entertainment, healthcare and charitable giving. These business entities accept credit card payments through both card-present and card-not-present interactions.