PAIA Manual

Cybersec Clinique (Pty) Ltd is a South African cybersecurity and information technology consultancy. We provide cybersecurity consulting, governance, risk and compliance (GRC), digital forensics, incident response, software engineering, information security training and related professional services.

This PAIA Manual explains how you request access to records held by Cybersec Clinique in accordance with the Promotion of Access to Information Act, 2000 (PAIA). The Manual also contains information required by the Protection of Personal Information Act, 2013 (POPIA).

The purpose of this Manual is to:

• checkExplain how you request access to records held by Cybersec Clinique.
• checkDescribe the records we hold.
• checkExplain how we process personal information.
• checkProvide the contact details of our Information Officer.
• checkAssist you in exercising your rights under PAIA and POPIA.

The Information Officer is responsible for receiving and processing requests made under PAIA and POPIA.

Cybersec Clinique maintains records required for its business operations. These include:

Access to these records is subject to PAIA, POPIA and any other applicable legislation.

You submit a written request to the Information Officer describing the record you require.

Your request should include sufficient information to identify the requested record and your contact details.

Cybersec Clinique reviews each request and responds within the timeframes prescribed by PAIA.

Cybersec Clinique refuses access where required or permitted by law. This includes records containing confidential information, commercially sensitive information, personal information belonging to another person, information protected by legal privilege or information which, if disclosed, would compromise information security or ongoing investigations.

Cybersec Clinique processes personal information in accordance with POPIA.

We collect and process personal information to provide professional services, manage client relationships, comply with legal obligations, recruit employees, communicate with clients and protect our systems and information assets.

We apply appropriate technical and organisational security measures to protect personal information from unauthorised access, disclosure, alteration or destruction.

Further information appears in our Privacy Policy.

This Manual is available on the Cybersec Clinique website and is available on request from the Information Officer.