An IT manager is working with a project manager to implement a new ERP system capable of transacting data between the new ERP system and the legacy system. As part of this process, both parties must…

A Memorandum of Understanding (MOU) documents high-level mutual intentions and general responsibilities between parties but does not specifically define the technical security controls required for a system interconnection.

An Information System Security Agreement is not a standard formally recognized document type in NIST or common security governance frameworks for governing system-to-system connections.

An Interconnection Security Agreement (ISA) is the NIST-recognized formal document specifically designed to capture the security requirements, controls, and responsibilities that both parties agree to when connecting their IT systems. It is the standard instrument for formalizing the technical and operational security terms of a system interconnection, making it the correct choice when a new ERP and a legacy system must be securely linked.

An Interoperability Agreement addresses the technical ability of two systems to exchange and use data but does not specifically define the security controls and requirements protecting that connection.

An Operating Level Agreement (OLA) defines internal service delivery commitments between IT support groups and does not address security controls for connecting two separate enterprise systems.