Tomcat and oracle database support services for raf claims applications (5‑month contract)

Service providers/suppliers should ensure that RFQ responses are emailed to the correct email address;

Unable to extract eligibility criteria

Service providers/suppliers should ensure that RFQ responses are emailed to the correct email address;

Bidders are requested to provide client reference information for services currently or previously rendered.

Returnable Documents:

• Bidders Client References (as per Annexure B format).

Risks:

• Any falsified or misrepresented information in the Bidder Client References will lead to disqualification.
• The RAF reserves the right to contact listed clients to authenticate information.

Bidders must demonstrate current or previous experience in rendering similar services (Tomcat and Oracle Database support). References must be from entities that directly obtained the bidder's services (not sub-contractors). All information provided must be authentic and verifiable, as the RAF will independently contact references to validate submissions.

Bidders are requested to provide client reference information for services currently or previously rendered that are similar to the required support for Tomcat and Oracle Database for RAF Claims Applications.

{"name":null,"email":null,"phone":null,"department":null,"address":"gorithms that comply with"}

provisions of the Protection of Personal Information Act, .

The Service

the Service Provider should have policies and procedures in place to ensure that access is

controlled and monitored.

1.2.5 Fire Suppression

The Service Provider’s premises should have a fire suppression system or similar in place,

fire extinguishers with carbon dioxide, to prevent damage or loss of documents and records in

the event of a fire.

1.3 Security including secure facility.

The Service Provider ’s premises should have a secure perimeter with controlled access and

or surveillance systems. The premises should have secure doors, locks, and alarms to

prevent unauthorised access.

1.3.1 Physical Security

security of the documents, including controlled access points, surveillance cameras, and or

24/7 security monitoring. The Service Provider must always ensure the physical security of

records in their possession. All document storage facilities must be adequately protected

against unauthorised access. Should there be any real, attempted, or suspected breach of

physical security the Service Provider will be obliged to inform the RAF and provide any

place, such as firewalls, intrusion detection, and encryption, to protect against unauthorised

access or attacks.

1.3.5 Access Control

• Grant access on a need-to-know basis.
• Use strong authentication methods to control access to systems and data.
• Regularly review and update access permissions.

1.3.6 Data Protection Obligations

• The Service Provider must handle and process personal and sensitive data in

compliance with applicable data protection laws and regulations.

• Implement measures to safeguard data against unauthorised access, disclosure,

alteration, and destruction.

• Inform the RAF immediately of any data breaches or incidents that may impact the

security of the information.

• The Service Provider shall implement appropriate measures designed to ensure

the confidentiality of personal, confidential and sensitive date, including by

imposing confidentiality obligations on any of its agents or subcontractors, or any

third party who has received records.

processing of personal information.

• Third-party service providers that handle PII on behalf of the organization should

be screening or vetted for their data protection policies and procedures and should

be required to sign a data protection agreement.

• Raf reserve the right to conduct security screening or vetting for company directors

and resources provided.

1.3.7 Cybersecurity Standards:

• The Service Provider is required to implement robust cybersecurity measures to

protect against cyber threats, including but not limited to malware, phishing, and

unauthorised access.

• Use encryption for data in transit and at rest to ensure the confidentiality of

sensitive information. Utilise encryption protocols and algorithms that comply with

industry standards.

• Regularly update and patch systems, software, and applications to address

security vulnerabilities.

1.3.8 Incident Reporting and Response:

• The Service Provider must have a documented incident response plan to address

and mitigate data breaches promptly.

• The Service Provider must report any security incidents or data breaches to RAF in

a timely manner.

1.3.9 Subcontractors and Third-Party Oversight

• If subcontractors are engaged, the Service Provider must ensure that they also

adhere to the same data protection and cybersecurity standards outlined in this

policy.

• The Service Provider is responsible for the actions and compliance of any sub-

contractors or third parties engaged in providing services to the RAF.

1.3.10 Audit and Monitoring

• The RAF reserves the right to audit and monitor the Service Provider ’s compliance

with this policy.

• The Service Provider must cooperate with any audits or assessments conducted

by RAF to evaluate compliance with data protection and cybersecurity standards.

Any person (natural or juristic) may make an offer or offers in terms of this invitation to bid. In line with the principles of transparency, accountability, impartiality, and ethics as enshrined in the Constitution of the Republic of South Africa and further expressed in various pieces of legislation, it is required for the bidder to make this declaration in respect of the details required hereunder.

Bidders must not be listed in the Register for Tender Defaulters or the List of Restricted Suppliers; none of the bidder’s directors, trustees, shareholders, members, partners, or persons with a controlling interest may be employed by the state; there must be no relationships with RAF employees that could create a conflict of interest; and the bidder must have no interest in any other related enterprise that could affect impartiality. All declarations must be truthful and complete.

Any person (natural or juristic) may make an offer or offers in terms of this invitation to bid. In line with the principles of transparency, accountability, impartiality, and ethics as enshrined in the Constitution of the Republic of South Africa and further expressed in various pieces of legislation, it is required for the bidder to make this declaration in respect of the details required hereunder.