The City of Burnaby is requesting responses from network penetration testing (“pen test”) firms or consultants to be registered on its pre-qualified list for penetration test firms for bidding on individual penetration test contracts. The works are required to satisfy the requirement 11.3 of Payment Card Industry Data Security Standard (PCI DSS), which includes annual penetration test of the entire CDE perimeter and critical systems, and pentest after significant modification or upgrades.