How to bid on PCI DSS testing and assessment for the Peninsula Corridor Joint Powers Board

What the agency is buying

The Peninsula Corridor Joint Powers Board is seeking firms to perform PCI DSS penetration testing, complete a PCI DSS Self-Assessment Questionnaire D, or provide both services.

The JPB intends to award one or two five-year agreements, subject to Board of Directors approval. The notice identifies the San Mateo County Transit District department.

Key dates and the deadline

The opportunity was published October 30, 2026. The listed deadline is December 7, 2026, at 8:00 PM ET.

The plain-English summary says the notice does not state a response deadline. Check the PlanetBids listing and any addenda for the applicable due date and submission details. The listing says to submit electronically before the due date.

Who this opportunity suits

This opportunity suits firms qualified to provide PCI DSS penetration testing, SAQ-D services, or both. A firm may focus on one service or propose both, according to the solicitation description.

How to access and respond

Select “View the original posting” to open the bid on the agency’s PlanetBids portal. The scope, dates, and document list are public there. PlanetBids may ask you to complete a “confirm you are human” check before the page loads.

To download documents, receive addenda, and submit electronically, register for a free PlanetBids vendor account with the agency. Review the listing and its documents for the response instructions, then submit before the due date.

Prepare a clear, complete proposal

Decide whether you are proposing penetration testing, SAQ-D completion, or both, and make that choice easy to identify. Explain your relevant experience and how your team will deliver each service you propose.

Use the solicitation documents and any addenda as your checklist. Confirm that your response addresses each requested item, follows the portal’s submission steps, and is submitted well before the deadline.