This Tender Has Expired

The service provider must comply with the provisions of the Protection of Personal Information Act (POPIA).

{"name":null,"email":null,"phone":null,"department":null,"address":"gorithms that comply with"}

Service providers must demonstrate: physical security measures including surveillance and access control; data protection compliance and cybersecurity protocols; secure document handling and transportation capabilities; incident reporting procedures; willingness to undergo RAF audits and security vetting; ability to ensure subcontractor compliance with same standards.

The service provider must comply with the Protection of Personal Information Act (POPIA).

• The service provider will handle RAF's confidential, private, personal, or sensitive information (files, data, documents).
• Must have policies and procedures to comply with RAF requirements and POPIA.
• Must implement technical and organisational security measures.

The service provider must comply with data protection laws, including the Protection of Personal Information Act (POPIA).

• Must implement security measures to protect confidential and personal information.
• Must have physical security measures including controlled access, surveillance, and 24/7 monitoring.
• Must have a secure facility with perimeter security, secure doors, locks, and alarms.
• Must implement cybersecurity standards including encryption, firewalls, and regular system updates.
• Must have incident reporting and response procedures.
• Must ensure subcontractors adhere to the same data protection standards.
• RAF reserves the right to audit and monitor compliance.

The service provider's premises must have fire suppression measures.

• Must have a fire suppression system or similar (e.g., carbon dioxide fire extinguishers) to prevent damage or loss of documents and records in case of fire.
• Must have a secure facility with a secure perimeter, controlled access, surveillance systems, secure doors, locks, and alarms to prevent unauthorised access.
• Must have physical security measures including controlled access points, surveillance cameras, and/or 24/7 security monitoring.

The service provider must ensure physical security of documents and records.

• Must have controlled access points, surveillance cameras, and/or 24/7 security monitoring.
• Must protect storage facilities against unauthorised access.
• Must report any real, attempted, or suspected breach of physical security to RAF and provide evidence (e.g., CCTV footage, police reports).
• Must implement network security measures including firewalls, intrusion detection, and encryption.
• Must implement access control policies: grant access on a need-to-know basis, use strong authentication, regularly review permissions.
• Must comply with data protection laws: safeguard data against unauthorised access, disclosure, alteration, destruction; report data breaches immediately to RAF.
• Must impose confidentiality obligations on agents, subcontractors, or third parties.
• Third-party service providers handling personal information must be vetted and sign a data protection agreement.
• RAF reserves the right to conduct security screening of company directors and resources.
• Must implement cybersecurity standards: robust measures against cyber threats, encryption for data in transit and at rest, regular system updates and patching.
• Must have a documented incident response plan and report security incidents to RAF promptly.
• Must ensure subcontractors adhere to the same data protection and cybersecurity standards.
• RAF reserves the right to audit and monitor the service provider's compliance; the service provider must cooperate with audits.

The service provider will handle RAF's confidential, private, personal, or sensitive information (files, data, documents).

• Must comply with the Protection of Personal Information Act (POPIA).
• Must have document handling and transportation protocols: secure (lockable) transportation system for files.
• Must implement security measures during handling and transportation to prevent loss, theft, or damage.
• Must maintain accurate records of each document stored, including location, access history, retention schedule; records must allow easy tracking.
• Must have secure document retrieval protocols: verify requester identity, ensure secure transport.
• Must maintain detailed records of retrieval activities: date, time, requester identity, reason.
• Must store physical documents in lockable cabinets to prevent unauthorised access or tampering.
• Must have access control policies and procedures to ensure access is controlled and monitored.
• Must implement document access control: only authorised personnel permitted to handle, view, or transport documents.
• Must have access monitoring and control procedures to ensure only authorised personnel access documents and storage facility.
• Must implement network security measures.