Security Service Providers are, like almost all other businesses, enjoined to comply with the provisions of the Protection of Personal Information Act (POPIA).
The very nature of Private Security Services, especially those involved in Private Investigations, are especially vulnerable to legislative threats and sanctions.
In view of the fact that Baartman & du Plessis Attorneys continued efforts to render an all-inclusive service to Security Service Providers, we ultimately had no other option but to develop a POPIA compliance service product for our clients.
Our POPIA solution provides an integrated and practical compliance system for small and medium security enterprises to exponentially increase their compliance with POPIA.
Characteristics
● | Designed for comprehensive and immediate implementation. |
● | Personalised, practical, and “ready-to-sign” documents. |
● | Requires no prior specialised skills or knowledge to implement. |
● | Rapid deployment. |
● | Optional “After-Market” Care and Maintenance. |
Methodology And Approach
The solution was developed on the premise that most security businesses, if not all, consist largely of the following areas of operations:-
● | Client Management |
● | Procurement Management |
● | Information Resources Management |
● | Access Control Activities |
● | Human Resources Management |
All documents, policies, etc were accordingly drafted and compiled to address each of these areas.
Product Contents
Our solution contains the following practicable and personalised documents, all of which include “ready-to-sign” resolutions for immediate implementation.
● | A Step-by-Step Guide to unpacking and implementing the system. (17 Pages) | ||
● | Analysis and Risk Assessments (103 pages) | ● | Client Management Framework |
▪ | ● | Procurement Framework | |
▪ | ● | Information Resources Framework | |
▪ | ● | Access Control Activities (Non-Biometric) | |
▪ | ● | Human Resources Framework (Employees) | |
● | POPI Framework (as Required by Law)(8 Pages) | This document provides the statutory framework, the establishment of an information protection committee (IPC) as well as the functions and obligations of the IPC and Information Officer. It serves as an all-inclusive policy document for both the IPC and the Information Officer) | |
● | Internal guidelines, to assist the user in | ● | About internal Policies and Guidelines |
▪ | understanding certain functions within the | ● | Guidelines: Retention of Records |
▪ | POPI framework (5 pages) | ● | Guidelines: Applicable Legislation |
▪ | ● | Guideline on Destruction of Information | |
● | Internal Policies (49 Pages) | ● | Breach of Personal Information (Required by law) |
● | Client Management Framework | ||
● | Procurement Framework | ||
● | Information Resources Framework | ||
● | Access Control Framework (Non-Biometric) | ||
● | Human Resources Framework (Employees) | ||
● | Human Resources Framework (Employees) | ||
● | Human Resources Framework (Recruits) | ||
● | Use of Third Party Processors | ||
● | PAIA Manual (required by Law) (37 pages) | ||
● | Documents and Agreements (38 pages) | ● | Resolution appointing I.P.C |
● | Generic consent to Process Information | ||
● | Employees consent to Process Information | ||
● | Recruit’s Consent to Process Information | ||
● | Employee Confidentiality Agreement | ||
● | Fait Use of Information Systems Agreement | ||
● | Confidentiality Undertaking by Business | ||
● | Confidentiality Agreement for Service Providers | ||
● | Privacy Statement: Procurement | ||
● | Privacy Statement: Human Resources (Employees) | ||
● | Privacy Statement: Human Resources (Recruits) | ||
● | Privacy Statement: Access Control | ||
● | Abridged Consent: Access Control | ||
● | Full Consent: Access Control |
Deployment and Delivery
Deployment and electronic delivery will, under normal circumstances take place within three to five working days.
“After-Market” Care and Maintenance
In pursuit of our strategy to provide an affordable product to both small businesses, whose resources may be limited, as well as medium enterprises with more resources at hand, users are provided with the following options :
● | An outright sale of the system; or |
● | An optional “after-market” care and maintenance subscription service, in which case, users will be allocated to an Authorized Compliance Consultant, who, with our support, knowledge, and infrastructure will maintain and develop the user’s POPIA program. Kindly contact us for more information about our after-market care and maintenance program. |
Ordering your Solution
Send us a mail by clicking here.