The road accident fund (raf) wishes to appoint a diligent, professional and efficient service provider to provide regulation 21 refresher exercises for handgun, self-loading rifle and shooting range facility for security personnels for a period of twelve (12) months in gauteng.

This is a Preference Points Claim Form (SBD 6.1) in terms of the Preferential Procurement Regulations 2022.

• It must be completed and submitted as part of the tender.
• It outlines the preference point systems (80/20 for contracts up to R50 million, 90/10 for above R50 million).
• For this tender, the 80/20 system applies.
• The form includes definitions, formulae for scoring, and a declaration section for claiming points for specific goals.

Returnable Documents: Not specified in the provided text. Ensure all required forms and documentation are submitted by the closing date to avoid disqualification.

Must be a registered company/firm (various entity types accepted including Pty Ltd, Close Corporation, Partnership/Joint Venture); Must submit proof of B-BBEE status or equivalent for specific goals claims; Must comply with General Conditions and Definitions of the Preferential Procurement Regulations 2022; Must submit all required documentation with tender submission.

The tender is for the provision of Regulation 21 refresher exercises for handgun, self-loading rifle and Shooting Range facility for Security Personnel in Gauteng for a period of twelve (12) months.

Tenderers must complete and submit the SBD 6.1 Preference Points Claim Form.

• Points are awarded for Specific Goals related to Historically Disadvantaged Individuals, Women, and Persons with Disability.
• Tenderers must declare company type and registration number.
• Fraudulent claims may lead to disqualification, contract cancellation, recovery of costs, restriction from state business, and criminal prosecution.

Any person (natural or juristic) may make an offer. Bidders must complete a declaration of interest as required by legislation, adhering to principles of transparency, accountability, impartiality, and ethics.

Returnable Documents: The bidder must complete and submit the SBD 4 Declaration of Interest form. The form requires disclosure of state employment, relationships with procuring institution employees, and interests in other enterprises. The bidder must certify that the bid is independent and not collusive. Failure to provide a true and complete declaration will result in disqualification.

Bidders must not be listed on the Register for Tender Defaulters or List of Restricted Suppliers. They must disclose any state employment of directors/trustees/shareholders, relationships with RAF employees, and interests in related enterprises. Bidders must certify independent bidding without collusion and compliance with all relevant legislation including the Competition Act and Prevention and Combating of Corrupt Activities Act.

Scope: Provide Regulation 21 refresher exercises for handgun, self-loading rifle, and Shooting Range facility for Security Personnel. Location: Gauteng. Duration: Twelve (12) months. General: Any person (natural or juristic) may bid. Bidders must adhere to principles of transparency, accountability, impartiality, and ethics as per the Constitution and relevant legislation.

No specific requirements found

The service provider must comply with the provisions of the Protection of Personal Information Act.

Service providers must demonstrate: capability to provide Regulation 21 refresher exercises for handgun and self-loading rifle; access to a shooting range facility in Gauteng; established policies for data protection and physical security; secure premises with surveillance and access control; incident response and breach reporting procedures; and willingness to undergo RAF audits and security vetting.

The service provider must implement technical and organisational security measures for handling RAF's confidential, private, personal, or sensitive information. Key requirements include:

• Comply with the Protection of Personal Information Act (POPIA).
• Have policies in place to meet RAF security requirements.
• Implement secure document handling and transportation protocols, using lockable containers and a secure transport system.
• Maintain accurate records for each document, including location, access history, and retention schedule.
• Use secure retrieval protocols, verifying requester identity and ensuring secure transport.
• Store physical documents in lockable cabinets to prevent unauthorised access.
• Control and monitor access to documents and records, allowing only authorised personnel.
• Have fire suppression systems (e.g., carbon dioxide extinguishers) on premises.
• Ensure premises have a secure perimeter, controlled access, surveillance systems, secure doors, locks, and alarms.
• Implement physical security measures including controlled access points, surveillance cameras, and 24/7 monitoring.
• Implement network security measures such as firewalls, intrusion detection, and encryption.
• Enforce access control on a need-to-know basis with strong authentication and regular permission reviews.
• Handle personal and sensitive data in compliance with data protection laws, safeguarding against unauthorised access, disclosure, alteration, and destruction.
• Report data breaches or security incidents to RAF immediately.
• Impose confidentiality obligations on agents, subcontractors, or third parties.
• Vet third-party service providers handling PII and require data protection agreements.
• Implement robust cybersecurity measures against malware, phishing, and unauthorised access.
• Use encryption for data in transit and at rest, complying with industry standards.
• Regularly update and patch systems, software, and applications.
• Have a documented incident response plan and report incidents to RAF promptly.
• Ensure subcontractors adhere to the same data protection and cybersecurity standards.
• Cooperate with RAF audits and monitoring of compliance.

The service provider must comply with data protection and cybersecurity standards as part of the security requirements. Key points include:

• Comply with the Protection of Personal Information Act (POPIA) and other applicable data protection laws.
• Implement measures to safeguard personal and sensitive data against unauthorised access, disclosure, alteration, and destruction.
• Report any data breaches or security incidents to RAF immediately.
• Impose confidentiality obligations on agents, subcontractors, or third parties handling records.
• Vet third-party service providers handling personally identifiable information (PII) and require data protection agreements.
• RAF reserves the right to conduct security screening or vetting for company directors and resources provided.
• Implement robust cybersecurity measures, including encryption for data in transit and at rest.
• Regularly update and patch systems, software, and applications.
• Have a documented incident response plan.
• Ensure subcontractors adhere to the same data protection and cybersecurity standards.
• Cooperate with RAF audits and monitoring of compliance.

The service provider must implement health and safety measures related to document security. Key requirements include:

• Have policies and procedures to control and monitor access.
• Have a fire suppression system or similar (e.g., carbon dioxide fire extinguishers) on premises to prevent damage or loss of documents in a fire.
• Ensure premises have a secure perimeter with controlled access and surveillance systems, secure doors, locks, and alarms to prevent unauthorised access.
• Implement physical security measures.

The service provider must ensure security of documents and comply with data protection obligations. Key terms include:

• Ensure physical security of records with controlled access points, surveillance cameras, and 24/7 monitoring.
• Protect document storage facilities against unauthorised access and report any real, attempted, or suspected breaches to RAF, providing evidence such as CCTV footage or police reports.
• Implement network security measures like firewalls, intrusion detection, and encryption.
• Control access on a need-to-know basis, using strong authentication and regularly reviewing permissions.
• Handle personal and sensitive data in compliance with data protection laws, safeguarding against unauthorised access, disclosure, alteration, and destruction.
• Report data breaches or incidents to RAF immediately.
• Ensure confidentiality by imposing obligations on agents, subcontractors, or third parties.
• Vet third-party service providers handling PII and require data protection agreements.
• RAF reserves the right to conduct security screening of company directors and resources.
• Implement robust cybersecurity measures against threats like malware and phishing.
• Use encryption for data in transit and at rest, complying with industry standards.
• Regularly update and patch systems, software, and applications.
• Have a documented incident response plan and report incidents promptly.
• Ensure subcontractors adhere to the same data protection and cybersecurity standards.
• Cooperate with RAF audits and monitoring of compliance.

The service provider will handle RAF's confidential, private, personal, or sensitive information (referred to as files, data, and/or documents). Requirements include:

• Comply with the provisions of the Protection of Personal Information Act.
• Implement document handling and transportation protocols.
• Have a secure transportation system (lockable) to transfer files to and from premises.
• Implement security measures to prevent loss, theft, or damage.
• Maintain record keeping with location, access history, and retention schedule, organised for easy tracking.
• Implement document retrieval and handling procedures.
• Ensure secure retrieval by verifying requester identity and transporting documents securely.
• Keep detailed records of retrieval activities including date, time, requester identity, and reason.
• Provide secure storage to prevent unauthorised access or tampering.
• Control access to documents and records.
• Implement document access control, allowing only authorised personnel to handle, view, or transport documents.
• Monitor and control access to ensure only authorised personnel have access to documents, records, and storage facilities.
• Implement network security measures.