Security System Maintenance and Repair Services NEW

The Road Accident Fund (RAF) is seeking a suitable service provider to maintain, service and repair the security systems at its Mafikeng Customer Experience Centre (CEC). The contract runs on a month-to-month basis for six (6) months, giving RAF flexibility while it assesses its longer-term security requirements. The work covers the routine servicing, preventive maintenance and corrective repair of the facility's security infrastructure, with the aim of keeping the premises protected and operational throughout the contract period.

The supporting Annexure A sets out Technical and Organisational Security Measures that apply to the service provider, particularly where it handles RAF's confidential files, data and documents. The service provider must have policies that comply with RAF's requirements and the Protection of Personal Information Act 4 of 2013 (POPIA). Key requirements include secure handling and transport of records using lockable containers, accurate record-keeping and access logs, lockable storage with controlled and monitored access, and fire suppression measures. Physical security obligations include controlled access points, surveillance, alarm systems and 24/7 monitoring, with the provider required to report any suspected breach and supply CCTV footage, police reports and alarm records. Digital requirements include firewalls, intrusion detection, encryption in transit and at rest, strong authentication, need-to-know access, timely patching and a documented incident response plan. Subcontractors must meet the same standards, and RAF reserves the right to audit compliance and vet company directors and resources. Bidders should note that the annexure reads as if it applies to the custody of records as well as equipment, so they should review the RFQ and SBD documents carefully to confirm the full scope before pricing.

For RAF, the contract provides continuity of security at a key regional facility and reduces the risk of downtime, theft and unauthorised access. For the successful provider, it offers a short-term, recurring revenue stream and the opportunity to build a relationship with a public entity. Bidders should be prepared to demonstrate technical competence in security systems, relevant certifications, adequate insurance, a POPIA-compliant data protection framework, and capacity to respond quickly to faults. Tender documents, including the RFQ, SBD forms and Annexure A, must be read in full and returned by the closing date.