Maintenance and repair of security systems for raf durban office (6-Month contract)

Bidding is open to any natural or juristic person. Bidders must declare adherence to the principles of transparency, accountability, impartiality, and ethics as outlined in the Constitution of South Africa and applicable legislation.

Submit all required documents as listed in the tender invitation. Incomplete or inaccurate submissions may lead to disqualification.

Eligibility: Open to any natural or juristic person. Bidders must declare compliance with transparency, accountability, impartiality, and ethics per the South African Constitution and relevant legislation. Scope: Maintenance, servicing, and repair of security systems at the RAF Durban Office on a month-to-month basis for a maximum of six (6) months.

Service providers/suppliers must ensure RFQ responses are emailed to the correct email address.

Returnable Documents: Submit all required documents as specified in the RFQ. Responses must be emailed to the correct email address provided in the tender document.

Scope: Maintain, service, and repair security systems at the RAF Durban Office. Contract duration: Month-to-month basis, not exceeding six (6) months. Submission requirement: RFQ responses must be emailed to the correct email address.

Complete the Preference Points Claim Form as per the Preferential Procurement Regulations 2022.

Submit all required forms as specified in the tender. Failure to return all requested documents may result in disqualification.

Complete the Preference Points Claim Form in terms of the Preferential Procurement Regulations 2022.

Returnable documents are not explicitly specified in the provided text. Bidders must refer to the official tender document (Annexure A - Security Measures.pdf) for exact submission requirements, forms, and disqualification risks.

Scope: Maintain, service, and repair security systems at the RAF Durban Office on a month-to-month basis for up to six months.

Physical Security Requirements:

• Ensure controlled access points, surveillance cameras, and 24/7 monitoring.
• Protect all records against unauthorised access and report breaches to RAF immediately.
• Maintain a secure perimeter with controlled access, surveillance systems, secure doors, locks, and alarms.

Access Control:

• Grant access strictly on a need-to-know basis.
• Use strong authentication methods for systems and data.
• Regularly review and update access permissions.

Data Protection:

• Comply with the Protection of Personal Information Act (POPIA) and other applicable laws.
• Safeguard data against unauthorised access, disclosure, alteration, or destruction.
• Report data breaches or security incidents to RAF without delay.
• Impose confidentiality obligations on agents, subcontractors, or third parties handling records.

Cybersecurity:

• Implement firewalls, intrusion detection systems, and encryption (for data in transit and at rest).
• Use industry-standard encryption protocols and algorithms.
• Regularly update and patch systems, software, and applications to address vulnerabilities.

Incident Reporting:

• Maintain a documented incident response plan.
• Report all security incidents or breaches to RAF promptly.

Subcontractors and Third Parties:

• Ensure subcontractors adhere to the same data protection and cybersecurity standards.
• Service provider remains responsible for subcontractor compliance.

Audit and Monitoring:

• Cooperate with RAF audits to evaluate compliance with security standards.

Fire Suppression:

• Premises must have fire suppression systems (e.g., CO2 fire extinguishers) to protect documents and records.

Data Protection Compliance:

• Must comply with the Protection of Personal Information Act (POPIA).
• Implement measures to ensure confidentiality of personal, confidential, and sensitive data.

Security Standards:

• Use encryption protocols and algorithms compliant with industry standards.
• Regularly update and patch systems to address vulnerabilities.

Third-Party Vetting:

• Third-party service providers handling personal information must be vetted for data protection policies.
• Require third parties to sign a data protection agreement.
• RAF reserves the right to conduct security screening or vetting for company directors and assigned resources.

Audit Cooperation:

• Must cooperate with RAF audits to assess compliance with data protection and cybersecurity standards.

Access Control and Monitoring:

• Have policies and procedures in place to ensure access is controlled and monitored.

Fire Suppression:

• Premises must have a fire suppression system or equivalent (e.g., CO2 fire extinguishers) to prevent damage or loss of documents and records in the event of a fire.

Secure Facility:

• Premises must have a secure perimeter with controlled access and/or surveillance systems.
• Ensure secure doors, locks, and alarms to prevent unauthorised access.

Physical Security:

• Ensure controlled access points, surveillance cameras, and 24/7 security monitoring.
• Protect all records in possession against unauthorised access.
• Report any real, attempted, or suspected physical security breaches to RAF immediately.

Cybersecurity:

• Implement measures such as firewalls, intrusion detection, and encryption to protect against unauthorised access or attacks.

Access Control:

• Grant access on a need-to-know basis.
• Use strong authentication methods to control access to systems and data.
• Regularly review and update access permissions.

Data Protection Obligations:

• Handle and process personal and sensitive data in compliance with applicable laws (e.g., POPIA).
• Safeguard data against unauthorised access, disclosure, alteration, and destruction.
• Inform RAF immediately of any data breaches or incidents impacting information security.
• Ensure confidentiality of personal, confidential, and sensitive data, including imposing obligations on agents, subcontractors, or third parties.

Third-Party Vetting:

• Screen or vet third-party service providers handling personally identifiable information (PII) for their data protection policies and procedures.
• Require third parties to sign a data protection agreement.
• RAF reserves the right to conduct security screening or vetting for company directors and resources provided.

Cybersecurity Standards:

• Implement robust measures to protect against cyber threats (e.g., malware, phishing, unauthorised access).
• Use encryption for data in transit and at rest, compliant with industry standards.
• Regularly update and patch systems, software, and applications to address vulnerabilities.

Incident Reporting and Response:

• Maintain a documented incident response plan to address and mitigate data breaches promptly.
• Report security incidents or data breaches to RAF in a timely manner.

Subcontractors and Third-Party Oversight:

• Ensure subcontractors adhere to the same data protection and cybersecurity standards.
• Service provider remains responsible for subcontractor compliance.

Audit and Monitoring:

• RAF reserves the right to audit and monitor compliance with this policy.
• Cooperate with RAF audits or assessments to evaluate compliance with data protection and cybersecurity standards.