Payment Card Industry (PCI) Penetration Testing Service as required for a period of thirty-six (36) months from date of contract execution.