This Tender Has Expired

Scope: Provide security and data protection services for RAF confidential information.

Key requirements (point‑by‑point):

1. Document handling & transportation

• Established protocols for handling and moving files.
• Use lockable, secure transport containers.
• Maintain records of location, access history and retention schedule.

2. Document retrieval & handling

• Verify requester identity before release.
• Keep detailed logs of retrieval (date, time, requester, purpose).
• Store physical documents in lockable cabinets.

3. Physical security of premises

• Secure perimeter, controlled access points, surveillance cameras, 24/7 monitoring.
• Lockable doors, alarms and reporting of any breach to RAF with evidence.

4. Network & cyber security

• Firewalls, intrusion detection, encryption for data at rest and in transit.
• Strong authentication, need‑to‑know access, regular permission reviews.
• Regular patching and updates; protection against malware, phishing, etc.

5. Data protection obligations

• Compliance with POPIA and other applicable data protection laws.
• Confidentiality obligations for all staff, subcontractors and third parties.
• Immediate reporting of any data breach or security incident to RAF.

6. Incident response & reporting

• Documented incident response plan.
• Timely notification to RAF of any security incidents.

7. Sub‑contractor management

• Ensure any subcontractors meet the same security and data protection standards.
• RAF reserves the right to vet directors and resources.

8. Audit & monitoring

• RAF may audit compliance; provider must cooperate fully.

Deliverables: Secure handling, storage, transport, and disposal of documents; ongoing compliance with security policies; regular reporting and audit support.

Required compliance (point‑by‑point):

• Adhere to the Protection of Personal Information Act (POPIA) and all relevant data protection legislation.
• Implement organisational policies to safeguard personal, confidential and sensitive data.
• Impose confidentiality obligations on all agents, subcontractors and third parties handling RAF records.
• Vet and screen any third‑party service providers for adequate data protection policies; obtain signed data protection agreements.
• Ensure the service provider’s directors and key resources can be subject to RAF security screening.
• Maintain CSD, tax, B‑BBEE, CIDB, CIPC and professional registration compliance as required by RAF (implicit from standard procurement rules).