This Tender Has Expired

The service provider must implement comprehensive physical and digital security measures for handling, transporting, and storing RAF files, data, and documents. Key requirements include: 1. Physical Security: Secure perimeter with controlled access, surveillance (CCTV), alarms, and secure doors/locks. Documents must be stored in lockable cabinets and transported in lockable containers. 2. Fire Safety: Premises must have fire suppression systems and CO2 fire extinguishers. 3. Data Protection: Compliance with POPIA is mandatory. Digital systems must have firewalls, intrusion detection, and encryption for data at rest and in transit. 4. Operational Protocols: Maintain accurate records of document access, retrieval, and retention. Access must be granted on a 'need-to-know' basis with strong authentication. 5. Incident Management: A documented incident response plan is required. Any security breaches or incidents must be reported to the RAF immediately, including providing CCTV footage, police reports, and alarm records. 6. Oversight: The RAF reserves the right to audit compliance. The provider is responsible for ensuring subcontractors adhere to the same security standards.

The service provider must comply with the Protection of Personal Information Act (POPIA). The RAF reserves the right to conduct security screening or vetting of company directors and personnel. Third-party service providers handling personal information must be vetted and required to sign a data protection agreement.