Which of the following is the BEST place to contractually document security priorities, responsibilities, guarantees, and warranties when dealing with outsourcing providers?

An NDA covers only the confidentiality of shared information and does not address service responsibilities, security controls, performance levels, or warranties.

An OLA is an internal agreement between departments within the same organization and is not applicable to contracts with external outsourcing providers.

An MOU is a non-binding statement of mutual intent used to outline broad cooperation goals and lacks the enforceability required for security guarantees and warranties.

An SLA is a contractual document that explicitly defines service expectations, security controls, assigned responsibilities, performance guarantees, and remedies for non-compliance between an organization and an external provider. Unlike informal agreements, the SLA creates enforceable obligations that protect both parties and is the standard mechanism for documenting security priorities in an outsourcing relationship.