Implement security measures to protect confidential and personal information.
Physical security: Controlled access points, surveillance cameras, and/or 24/7 monitoring.
Document storage facilities must be protected against unauthorised access.
Immediate reporting to RAF of any physical security breaches, with evidence (CCTV, police reports).
Data protection: Compliance with applicable laws, safeguarding against unauthorised access, disclosure, alteration, and destruction.
Immediate reporting of data breaches to RAF.
Impose confidentiality obligations on agents, subcontractors, or third parties.
Vet third-party service providers handling PII and require data protection agreements.
RAF reserves the right to conduct security screening of company directors and resources.
Cybersecurity: Implement robust measures against malware, phishing, and unauthorised access.
Use encryption for data in transit and at rest, complying with industry standards.
Regularly update and patch systems.
Have a documented incident response plan.
Ensure subcontractors adhere to the same data protection and cybersecurity standards.
Cooperate with RAF audits and monitoring.
Fire safety: Premises must have a fire suppression system or carbon dioxide fire extinguishers.
Secure facility: Premises must have a secure perimeter, controlled access, surveillance systems, secure doors, locks, and alarms.