Online IT learnership programme – security and data protection services

The service provider must implement and maintain the following security measures for RAF data and documents: 1. Physical Security: Secure, lockable transportation for files; lockable cabinets for storage; fire suppression systems (e.g., CO2 extinguishers); secure premises with controlled access, surveillance, and 24/7 monitoring. 2. Data Protection: Full compliance with the Protection of Personal Information Act (POPIA); maintain accurate records of document storage, access history, and retention schedules; ensure secure retrieval protocols (identity verification, secure transport). 3. Cybersecurity: Firewalls, intrusion detection, and encryption for data in transit and at rest; regular system updates and patching; strong authentication methods and need-to-know access control. 4. Operational Controls: Detailed logging of all retrieval activities (date, time, requester, reason); access restricted to authorised personnel only; subcontractors must adhere to the same standards. 5. Incident Management: Documented incident response plan; immediate reporting of any security breaches or data incidents to the RAF, including CCTV footage, police reports, and alarm records where applicable. 6. Oversight: RAF may audit compliance; service provider must cooperate with audits and ensure subcontractors sign data protection agreements.