Which of the following is the BEST place to contractually document security priorities, responsibilities, guarantees, and warranties when dealing with outsourcing providers?

Question

Options

• ANDA
• BOLA
• CMOU
• DSLA

• A
  3% (1)
• B
  3% (1)
• C
  7% (2)
• D
  87% (26)

Explanation

An SLA (Service Level Agreement) is the legally binding contract between a company and an external service/outsourcing provider that formally defines and enforces service performance levels, security responsibilities, uptime guarantees, data handling requirements, breach notification obligations, and remedies or penalties for non-compliance. It is the appropriate vehicle for all contractual security commitments. An NDA (A) only covers confidentiality and non-disclosure, not operational security duties. An OLA (B) is an internal agreement between IT and other departments within the same organization, not with external vendors. An MOU (C) is a non-binding memorandum of understanding that expresses intent but lacks the legal enforceability required for security guarantees and warranties.

No community discussion yet for this question.