Renewal of Connect Direct Services and Support – Road Accident Fund

The Road Accident Fund requires renewal of Connect Direct services and support for a 12-month contract period. The service provider will be entrusted with RAF's confidential, private, personal, and sensitive information and must implement comprehensive technical and organisational security measures compliant with the Protection of Personal Information Act, 4 of 2013. Key obligations include: secure document handling and transportation in lockable containers; secure storage in lockable cabinets with access control limited to authorised personnel; 24/7 physical security monitoring with controlled access points and surveillance cameras; fire suppression systems with carbon dioxide extinguishers; incident reporting procedures including provision of CCTV footage and police reports for security breaches; network security with firewalls, intrusion detection, and encryption; cybersecurity standards including malware and phishing protection; data encryption for transit and at rest; regular system patching and updates; documented incident response plans; vetting of company directors and resources; compliance oversight of any subcontractors or third parties; and cooperation with RAF audits and assessments. The service provider must maintain detailed records of document storage, retrieval activities, and access history, with access granted only on a need-to-know basis using strong authentication methods.