Objectives

The primary objective of this tender is to appoint a suitable service provider responsible for maintaining, servicing, and repairing security systems at the Durban Office of the Road Accident Fund (RAF). The engagement is on a month-to-month basis for a period not exceeding six (6) months.

Scope

The scope includes the provision of security system maintenance, servicing, and repair services at the RAF Durban Office. The service provider will handle both physical and digital security measures, ensuring the confidentiality, integrity, and security of sensitive information and physical documents. This encompasses:

• Handling and transportation of confidential files and data
• Storage and access control of physical documents
• Implementation of physical security measures (locks, surveillance, fire suppression)
• Digital security measures (firewalls, encryption, intrusion detection)
• Compliance with relevant data protection legislation
• Incident reporting and response
• Oversight of subcontractors and third-party service providers

Technical Requirements

The technical requirements specify that the service provider must:

• Implement protocols for secure handling, transportation, and storage of files and documents, including lockable containers and cabinets
• Maintain accurate records of document storage, access, and retrieval activities
• Ensure physical security through controlled access points, surveillance cameras, alarms, and secure perimeter fencing
• Have fire suppression systems and fire extinguishers in place
• Use secure digital storage systems with firewalls, intrusion detection, and encryption
• Ensure compliance with applicable data protection laws and regulations, including the Protection of Personal Information Act (POPIA)
• Screen and vet third-party service providers handling personal information, requiring them to sign data protection agreements
• Adopt cybersecurity standards to protect against malware, phishing, and other cyber threats
• Establish incident reporting and response procedures to address data breaches promptly

Skills Requirements

The service provider and its personnel must possess:

• Expertise in physical security measures, including access control, surveillance, and secure storage
• Knowledge of data protection and privacy legislation, particularly POPIA
• Proficiency in cybersecurity practices, including firewall management, encryption, and intrusion detection
• Experience in handling confidential and sensitive information securely
• Ability to implement and monitor security protocols and procedures
• Capacity to manage incident reporting and coordinate with law enforcement or security agencies when necessary
• Skills in overseeing third-party vendors and ensuring compliance with security standards