Intermediate ms excel training for 107 raf employees

The only provided content is the SBD 6.1 Preference Points Claim Form in terms of the Preferential Procurement Regulations 2022. The underlying tender (RFQ PR10119139) seeks a service provider for Intermediate MS Excel training for 107 RAF employees.

Returnable forms - all must be completed, signed and submitted with the quotation:

• SBD 6.1 (Preference Points Claim Form in terms of PPR 2022): claims preference points for specific goals. Failure to submit supporting documentation with the bid means no preference points are claimed for those goals.

Evaluation split:

• Price: 80 points
• Specific goals: 20 points
• Total: 100 points

Applicable preference point system: 80/20.

Specific goals and points (80/20 system):

• Historically disadvantaged individuals: 10 points
• Women: 8 points
• Persons with disability: 2 points

Bidders must indicate on the SBD 6.1 form how they claim points for each goal and provide supporting documentation. Fraudulent claims may lead to disqualification, contract cancellation, recovery of costs or damages, restriction from doing business with organs of state for up to 10 years, or criminal prosecution.

The tender is for the appointment of a service provider to provide Intermediate MS Excel training for 107 RAF employees.

No specific compliance requirements beyond completing and submitting the SBD 6.1 Preference Points Claim Form.

Bidders must complete and sign the Bidder's Disclosure form (SBD 4). This form requires the bidder to declare whether the bidder or any director, trustee, shareholder, member, partner, or person with a controlling interest is employed by the state, has a relationship with any employee of the procuring institution, or has an interest in any related enterprise. Bidders listed on the Register for Tender Defaulters or the List of Restricted Suppliers will be automatically disqualified. The declaration must be true and complete; a false declaration will disqualify the bid.

Bidders must comply with the Protection of Personal Information Act (POPIA) and RAF information security requirements. The RAF may security-screen or vet company directors and proposed resources. Subcontractors and third parties engaged in service delivery must adhere to the same data protection and cybersecurity standards, and the bidder remains responsible for their compliance.

The service provider must implement technical and organisational security measures specified in Annexure A:

• Document handling and transportation: secure, lockable containers or packaging during transport; maintain records of each document including location, access history and retention schedule.
• Document retrieval: verify requester identity; record date, time, requester identity and reason for each retrieval.
• Physical storage: lockable cabinets; access restricted to authorised personnel with controlled and monitored access.
• Premises security: secure perimeter, controlled access, surveillance cameras, 24/7 monitoring, secure doors, locks and alarms.
• Fire suppression: fire suppression system or carbon dioxide fire extinguishers to protect documents.
• Network security: firewalls, intrusion detection, encryption for digital storage systems.
• Access control: grant access on a need-to-know basis, use strong authentication, regularly review access permissions.
• Data protection: comply with data protection laws; safeguard data against unauthorised access, disclosure, alteration and destruction; inform RAF immediately of any data breaches; impose confidentiality obligations on agents and subcontractors.
• Third-party handling PII: screen or vet for data protection policies; require a signed data protection agreement.
• Cybersecurity: robust measures against malware, phishing and unauthorised access; encryption for data in transit and at rest using industry-standard protocols; regular patching and updates.
• Incident response: documented plan to address and mitigate breaches promptly; report security incidents or breaches to RAF in a timely manner.
• Subcontractor oversight: ensure subcontractors adhere to same standards; bidder responsible for their compliance.
• Audit: RAF may audit and monitor compliance; bidder must cooperate with audits and assessments.

The service provider must have policies and procedures in place to comply with the Protection of Personal Information Act (POPIA) and RAF requirements.

Fire safety: The service provider's premises must have a fire suppression system or similar, including carbon dioxide fire extinguishers, to prevent damage or loss of documents and records.

Physical security: Premises must have a secure perimeter with controlled access, surveillance systems, secure doors, locks, and alarms to prevent unauthorised access.

Contract security obligations include:

• Ensure physical security of records: controlled access points, surveillance cameras, and 24/7 security monitoring.
• Report any real, attempted, or suspected physical security breach to RAF, providing CCTV footage, police report and linked alarm system records.
• Implement network security measures: firewalls, intrusion detection, and encryption.
• Control access on a need-to-know basis; use strong authentication; regularly review and update access permissions.
• Handle personal and sensitive data in compliance with data protection laws; safeguard against unauthorised access, disclosure, alteration and destruction.
• Inform RAF immediately of any data breaches or security incidents.
• Impose confidentiality obligations on agents, subcontractors, and third parties receiving records.
• Ensure third-party service providers handling PII are screened or vetted for data protection policies and sign a data protection agreement.
• RAF may conduct security screening or vetting of company directors and resources.
• Implement cybersecurity measures against malware, phishing, and unauthorised access; use encryption for data in transit and at rest.
• Regularly update and patch systems, software, and applications.
• Maintain a documented incident response plan and report security incidents timely.
• Ensure subcontractors adhere to the same data protection and cybersecurity standards; bidder responsible for their compliance.
• RAF may audit and monitor compliance; bidder must cooperate with audits and assessments.