Long Term Arrangement for Advisory Services on PCI-DSS Compliance Across UNICEF Fundraising Channels (Lot 1 - PCI-DSS Compliance Consultancy Lot 2 - QSA Services) ---------------------------------------------------------------- The purpose of this consultancy is to establish one or more Long-Term Arrangement for Services (LTA-S) with qualified institutional service providers that can offer expert services to support UNICEF in achieving and maintaining PCI-DSS compliance through its payment card processes. The consultancy will provide PCI-related assessment services, offer strategic and technical guidance, evaluate third-party services, provide hands-on assistance to complete PCI Self-Assessment Questionnaires, deliver regular risk and status reports, and provide relevant training and associated training materials. The ultimate objective is to ensure that UNICEF's fundraising capabilities, including all systems, people, and processes related to payment card processing, are secure and compliant with global standards, while being business-relevant and enhancing UNICEF's fundraising capacity. The consultancy needs to accommodate providing services to teams in the European, East Asia Pacific, and Latin American regions. Fluency in verbal and written Spanish for Latin America countries would be an advantage. This engagement is intended to span an initial period of up to two years, with the possibility of extension for an additional three years, depending on performance and UNICEF's evolving needs. The LTA/s shall be a mutual agreement between UNICEF and the institution/s to provide the required services at agreed fees over a period of time. Once the LTA is established, UNICEF will issue Institutional Contracts as needed when specific services are required, specifying deliverables and time frames for each task. These contracts will follow the terms and conditions outlined in the LTA, and the agreed rate/fee stated in the LTA will be used to calculate the contract amount.