IT Vendor Personnel Guide

      Purpose

       This guide provides IT vendors engaged by SIM Group Ltd and its subsidiaries with essential guidelines and expectations for effective collaboration.

      1. Onboarding

• Vendor will be required to fill out the Direct Credit Authorization (DCA) Form with the award purchase.
• Vendor personnel must perform duties as outlined in the contract and project scope and adhere to all applicable SIM policies relevant to their role, including Cybersecurity, Data Protection and Code of Conduct requirements.
• Vendor personnel are expected to maintain professional conduct and integrity when performing work for SIM.

      2. System Access Requirements

• Vendor to contact Project Manager for Access Request Application.
• SIM reverses the rights to monitor and audit system activities by vendor personnel to ensure compliance with security and confidentiality obligations.

      3. Service Level Agreements (SLAs)

• Vendors are expected to meet the agreed-upon service levels outlined in the contract. Common SLA areas include:
  1. Uptime and availability
  2. Support response times
  3. Incident resolution times
• Non-compliance with SLAs may result in penalties or contract review.

      4. Data Security and Compliance

• Vendor personnel must comply with all confidentiality, data protection, and security obligations as stipulated in the signed contract between the Vendor and SIM.
• Vendor personnel shall protect SIM’s confidential and personal information and access data strictly on a need-to-know basis.
• Sharing of login credentials is strictly prohibited
• Encrypt sensitive data in transit and at rest
• No data may be stored outside approved systems or geographies
• Report immediately any data breach or security incident
• Comply with all applicable Legal and Regulatory requirements

      5. Workplace Safety and Health

• Vendors shall demonstrate a safety management system as required in the WSH Act
• Vendors shall actively report and mitigate hazards

      6. Invoicing and Payment

• To ensure timely payment, kindly:
  1. Submit invoices to Finance_AP finance_ap@sim.edu.sg
  2. Include Purchase Order (PO) number on all invoices
  3. Payment Terms: Net 30 days

      7. Termination and Offboarding

• Return all SIM-issued assets, including but not limited to laptops, ID cards and access tokens
• Final knowledge transfer and documentation must be completed and submitted before final payment