PCI DSS Compliance Expert Solicitation - Dept. of Air Force

SAM.gov Compliance & Audit Consulting Opportunities

Published January 14th, 2026

Detected March 13th, 2026

Summary

The Department of the Air Force is soliciting for a PCI DSS compliance expert to review data and gap assessments for DAF Nonappropriated Fund Instrumentalities (NAFI) cardholder data environments. The solicitation has a deadline for offers on January 29, 2026, and aims to refine PCI DSS scope and develop an expedited compliance path.

View original document View source feed page

What changed

The Department of the Air Force, specifically the Air Force Services Center (AFSVC), has issued a combined synopsis/solicitation (F41999-26-Q-0007) seeking a Payment Card Industry Data Security Standard (PCI DSS) compliance expert. The expert will review existing data and gap assessments for DAF NAFI cardholder data environments to refine PCI DSS scope, identify outstanding requirements, and develop an expedited compliance path, with the goal of conducting a formal audit by the end of FY26. The solicitation also requires guidance on maturing business systems and processes related to merchant processing.

This is a Nonappropriated Fund (NAF) purchase, meaning Federal Acquisition Regulation (FAR) rules do not apply, and no appropriated funds are obligated. Companies interested in providing these services must submit their quotes by January 29, 2026. The solicitation is an RFQ, and the government is not obligated to pay for quotes received. The place of performance is JBSA Lackland, TX.

What to do next

Review solicitation F41999-26-Q-0007 for PCI DSS compliance expert services.
Submit quotes by the deadline of January 29, 2026.
Consult the provided Statement of Objectives for contractor qualifications.

Source document (simplified)

Payment Card Industry Data Security Standards Audit Readiness.

Active Contract Opportunity Notice ID F41999-26-Q-0007 Related Notice Department/Ind. Agency DEPT OF DEFENSE Sub-tier DEPT OF THE AIR FORCE Major Command AIR EDUCATION AND TRAINING COMMAND Sub Command JOINT BASE SAN ANTONIO Office FA9000 AF NAF PO

Looking for contract opportunity help?

APEX Accelerators are an official government contracting resource for small businesses. Find your local APEX Accelerator for free government expertise related to contract opportunities.

APEX Accelerators are funded in part through a cooperative agreement with the Department of Defense.

The APEX Accelerators program was formerly known as the Procurement Technical Assistance Program (PTAP).

General Information View Changes

Contract Opportunity Type: Combined Synopsis/Solicitation (Updated)
Updated Published Date: Jan 14, 2026 05:13 pm CST
Original Published Date: Jan 09, 2026 02:29 pm CST
Updated Date Offers Due: Jan 29, 2026 02:00 pm CST
Original Date Offers Due: Jan 29, 2026 02:00 pm CST
Inactive Policy: Manual
Updated Inactive Date: Apr 15, 2026
Original Inactive Date: Apr 15, 2026
Initiative:
- None

Classification

- Original Set Aside:

Product Service Code: R710 - SUPPORT- MANAGEMENT: FINANCIAL
NAICS Code:
- 541618 - Other Management Consulting Services
Place of Performance: JBSA Lackland, TX 78236 USA

Description View Changes

THIS IS A NONAPPROPRIATED FUND (NAF) COMBINED SYNOPSIS/SOLICITATION AND FEDERAL ACQUISITION REGULATION (FAR) RULES DO NOT APPLY. THERE IS NO REQUIREMENT FOR SET-ASIDES. NO FURTHER INFORMATION WILL BE PROVIDED OTHER THAN WHAT IS STATED BELOW.

This is a NAF purchase, and it does not obligate appropriated funds of the United States Government. This purchase does not involve federal tax dollars. This solicitation and subsequent award are in accordance with the NAF Standard Clauses (30 May 2025). The FAR clauses and provisions do not apply to NAF purchases.

This solicitation is being issued as a Request for Quote (RFQ) with an assigned solicitation number of F41999-26-Q-0007. This announcement constitutes the only solicitation. The Government is not obligated to and will not pay for quotes received as a result of this announcement.

The Air Force Materiel Command’s Air Force Services Center (AFSVC), headquartered at Joint Base San Antonio-Lackland, Texas, provides critical support to military personnel and their families through Department of the Air Force (DAF) Nonappropriated Fund Instrumentalities (NAFI) across enterprise Services programs, including food, fitness, childcare, lodging, and recreation. AFSVC is responsible for developing programs, managing support functions, and responding to high-level inquiries. Merchant card processing is vital to AFSVC’s operations, accounting for ~90% of its transaction revenue.

AFSVC is seeking Payment Card Industry Data Security Standard (PCI DSS) compliance expert to review provided data and gap assessments related to DAF NAFI cardholder data environments to refine the PCI DSS scope, identify outstanding requirements to develop an expedited compliance path, and conduct the formal audit by end of FY26. Additionally, AFSVC requires a business expert to guide maturing and/or developing end-to-end business systems and processes related to merchant processing (see the attachment for Contractor Qualifications in the Statement of Objectives).

Questions and Answers (Q&A) for the pre-solicitation Request for Information is attached. Interested contractors desiring to ask additional questions related to this RFQ must submit their questions by email to fay.cameron@us.af.mil and valerie.baltimore@us.af.mil no later than (NLT) 4:00 PM CST Monday, 12 January 2026. A consolidated list of questions and answers will be posted NLT 4:00 PM CST Wednesday, 14 January 2026.

Place of Performance is JBSA Lackland, TX 78236 USA.

Amendment to RFQ F41999-26-Q-0007 Payment Card Industry Data Security Standard Audit Readiness is attached.