Objectives

The primary objective of this tender is to appoint a suitable service provider to conduct occupational hygiene surveys and ergonomics risk assessments for the Road Accident Fund's Johannesburg Office. The aim is to ensure a safe, healthy, and compliant working environment through comprehensive assessments and surveys.

Scope

The scope includes:

• Provision of occupational hygiene surveys to identify potential health hazards in the workplace.
• Conducting ergonomics risk assessments to evaluate and mitigate ergonomic risks affecting employees.
• Implementation of technical and organisational security measures for handling sensitive documents and data related to the assessments.
• Ensuring compliance with relevant legislation, including the Protection of Personal Information Act (POPIA).

Technical Requirements

The technical requirements encompass:

• Implementation of security measures for handling, transport, storage, and retrieval of confidential and sensitive information.
• Use of lockable containers, cabinets, and secure storage facilities with controlled access and surveillance systems.
• Availability of fire suppression systems and security alarms to protect physical records.
• Digital security measures such as firewalls, intrusion detection, and encryption for electronic document storage systems.
• Protocols for secure document retrieval, access control, and detailed activity logging.
• Compliance with data protection laws and cybersecurity standards to prevent unauthorized access, alteration, or destruction of data.
• Vetting and signing data protection agreements with third-party service providers handling personal information.
• Incident reporting and response procedures for data breaches or security incidents.

Skills Requirements

The service provider must possess:

• Expertise in occupational hygiene surveys and ergonomics risk assessments.
• Experience in implementing and managing physical and digital security measures for sensitive information.
• Knowledge of applicable data protection legislation, including POPIA.
• Proficiency in cybersecurity practices, including encryption, intrusion detection, and vulnerability management.
• Ability to develop and enforce policies for document handling, access control, and incident management.
• Capacity to vet and oversee third-party providers to ensure compliance with data security standards.
• Strong record-keeping and reporting skills for document management and security activities.