PCI DSS Assurance for services integrating with Worldpay (UKVI merchant codes)

The procurement contact named on the official notice.

Home Office Technical Services require an accredited Payment Card Industry (PCI) Data Security Standards Qualified Security Assessor (QSA) to undertake a formal assessment of in-scope services that integrate with Worldpay using UKVI merchant codes.

The engagement will secure an independent assessment, define any remediation required and provide the necessary compliance certification where achieved.

The work supports the integrity of migrant journey services and aligns with the directive to prioritise live service management and compliance while reducing exposure to card-scheme sanctions.

Supplier will provide a PCI SSC-accredited QSA (from a company on the PCI SSC list of approved assessors) to plan and execute an outcome-based PCI DSS assessment across the services listed below, deliver a certificate of compliance or a prioritised remediation plan per service, and support structured knowledge transfer to Home Office teams.