Maintenance, servicing, and repair of security systems at raf durban office (6-Month contract)

Bidders are requested to provide the required information in instances where you are currently or have previously rendered the required services:

Returnable Documents: Submit all required documents as specified in the tender. Incomplete submissions may be disqualified.

Scope: Maintain, service, and repair security systems at the RAF Durban Office. Requirements: Bidders must provide evidence of current or prior experience in rendering similar services.

Service providers/suppliers should ensure that RFQ responses are emailed to the correct email address;

Returnable Documents: Ensure all required documents are submitted as specified in the RFQ. Responses must be emailed to the correct email address provided in the tender document.

Scope: Maintain, service, and repair security systems at the RAF Durban Office. Contract duration: Month-to-month basis, not exceeding six (6) months. Submission requirement: RFQ responses must be emailed to the correct email address.

Any person (natural or juristic) may make an offer or offers in terms of this invitation to bid. In line with the principles of transparency, accountability, impartiality, and ethics as enshrined in the Constitution of the Republic of South Africa and further expressed in various pieces of legislation, it is required for the bidder to make this declaration in respect of the details required hereunder.

Returnable Documents: Bidder must submit all required documents as specified in the tender invitation. Failure to submit complete or accurate returnable documents may result in disqualification.

Eligibility: Open to any natural or juristic person. Bidder must declare compliance with principles of transparency, accountability, impartiality, and ethics as per the Constitution of South Africa and relevant legislation. Scope: Maintenance, servicing, and repair of security systems at the RAF Durban Office on a month-to-month basis for a maximum period of six (6) months.

provisions of the Protection of Personal Information Act, .

The Service

Returnable Documents: Not specified in the provided text. Refer to the official tender document for exact requirements.

Scope: Maintain, service, and repair security systems at the RAF Durban Office on a month-to-month basis for up to six months.

Key Requirements:

• Physical Security: Ensure controlled access points, surveillance cameras, and 24/7 monitoring. Protect records against unauthorised access and report any breaches to RAF.
• Access Control: Grant access on a need-to-know basis, use strong authentication, and regularly review permissions.
• Data Protection: Comply with POPIA and other applicable laws. Safeguard data against unauthorised access, disclosure, alteration, or destruction. Report breaches immediately.
• Cybersecurity: Implement measures like firewalls, intrusion detection, encryption (in transit and at rest), and regular system updates. Use industry-standard protocols.
• Incident Reporting: Maintain a documented incident response plan and report security incidents to RAF promptly.
• Subcontractors: Ensure third parties adhere to the same data protection and cybersecurity standards. Service provider remains responsible for their compliance.
• Audit and Monitoring: Cooperate with RAF audits to evaluate compliance with security standards.
• Fire Suppression: Premises must have fire suppression systems (e.g., CO2 fire extinguishers) to protect documents and records.
• Secure Facility: Premises must have a secure perimeter, controlled access, surveillance, secure doors, locks, and alarms.

Data Protection: Must comply with the Protection of Personal Information Act (POPIA). Implement measures to ensure confidentiality of personal, confidential, and sensitive data.

Security Standards:

• Use encryption protocols and algorithms compliant with industry standards.
• Regularly update and patch systems to address vulnerabilities.

Third-Party Vetting:

• Third-party service providers handling personal information must be vetted for data protection policies and required to sign a data protection agreement.
• RAF reserves the right to conduct security screening or vetting for company directors and resources provided.

Audit Cooperation: Must cooperate with RAF audits to assess compliance with data protection and cybersecurity standards.

the Service Provider should have policies and procedures in place to ensure that access is

controlled and monitored.

1.2.5 Fire Suppression

The Service Provider’s premises should have a fire suppression system or similar in place,

fire extinguishers with carbon dioxide, to prevent damage or loss of documents and records in

the event of a fire.

1.3 Security including secure facility.

The Service Provider ’s premises should have a secure perimeter with controlled access and

or surveillance systems. The premises should have secure doors, locks, and alarms to

prevent unauthorised access.

1.3.1 Physical Security

security of the documents, including controlled access points, surveillance cameras, and or

24/7 security monitoring. The Service Provider must always ensure the physical security of

records in their possession. All document storage facilities must be adequately protected

against unauthorised access. Should there be any real, attempted, or suspected breach of

physical security the Service Provider will be obliged to inform the RAF and provide any

place, such as firewalls, intrusion detection, and encryption, to protect against unauthorised

access or attacks.

1.3.5 Access Control

• Grant access on a need-to-know basis.
• Use strong authentication methods to control access to systems and data.
• Regularly review and update access permissions.

1.3.6 Data Protection Obligations

• The Service Provider must handle and process personal and sensitive data in

compliance with applicable data protection laws and regulations.

• Implement measures to safeguard data against unauthorised access, disclosure,

alteration, and destruction.

• Inform the RAF immediately of any data breaches or incidents that may impact the

security of the information.

• The Service Provider shall implement appropriate measures designed to ensure

the confidentiality of personal, confidential and sensitive date, including by

imposing confidentiality obligations on any of its agents or subcontractors, or any

third party who has received records.

processing of personal information.

• Third-party service providers that handle PII on behalf of the organization should

be screening or vetted for their data protection policies and procedures and should

be required to sign a data protection agreement.

• Raf reserve the right to conduct security screening or vetting for company directors

and resources provided.

1.3.7 Cybersecurity Standards:

• The Service Provider is required to implement robust cybersecurity measures to

protect against cyber threats, including but not limited to malware, phishing, and

unauthorised access.

• Use encryption for data in transit and at rest to ensure the confidentiality of

sensitive information. Utilise encryption protocols and algorithms that comply with

industry standards.

• Regularly update and patch systems, software, and applications to address

security vulnerabilities.

1.3.8 Incident Reporting and Response:

• The Service Provider must have a documented incident response plan to address

and mitigate data breaches promptly.

• The Service Provider must report any security incidents or data breaches to RAF in

a timely manner.

1.3.9 Subcontractors and Third-Party Oversight

• If subcontractors are engaged, the Service Provider must ensure that they also

adhere to the same data protection and cybersecurity standards outlined in this

policy.

• The Service Provider is responsible for the actions and compliance of any sub-

contractors or third parties engaged in providing services to the RAF.

1.3.10 Audit and Monitoring

• The RAF reserves the right to audit and monitor the Service Provider ’s compliance

with this policy.

• The Service Provider must cooperate with any audits or assessments conducted

by RAF to evaluate compliance with data protection and cybersecurity standards.