Which Agreement Covers It?

About this interactive

The Agreement Types lesson says a handshake is no longer enough: a written agreement sets the expectations, and seeing them in writing often sends both sides back to negotiate. Six agreements here. SLA, service level agreement: the standard of service the provider will reach, what counts as substandard, and the repercussions if it falls short, such as a credit or refund. NDA, non-disclosure agreement: what counts as confidential, and a promise not to disclose it to anyone else. MSA, master service agreement: the umbrella. It sets once how the two organizations will work together, such as payment terms, so each new piece of work does not need a long contract of its own. An NDA is often worked into it. SOW, statement of work (or work order): one piece of work under that umbrella: what will be done, the deliverables, delivery dates and cost. BPA, business partners agreement: how two companies will work together as partners, for example selling together and sharing what they earn. MOU, memorandum of understanding: an early, written record of what the parties intend, made so they are not on separate pages later. The lesson stresses it is not legally binding. A quick test for each card: is it a promised service level, a secret kept, standing terms for all the work, one job's details, a partnership, or an intention with no legal force?

What you'll learn

Pick the agreement that covers a business need: a service level agreement, non-disclosure agreement, master service agreement, statement of work, business partners agreement or memorandum of understanding
Tell the umbrella master service agreement, which sets standing terms once, from the statement of work for one project, and the binding agreements from a non-binding memorandum of understanding

Aligned to

CompTIA Security+

5.3 Explain the processes associated with third-party risk assessment and management.

NIST CSF

GV.SC-05 Requirements to address cybersecurity risks in supply chains are established, prioritized, and integrated into contracts and other types of agreements with suppliers and other relevant third parties.

Key terms

Service Level Agreement: A formal commitment between a provider and customer that guarantees a defined level of service uptime, including terms for compensation if the standard is not met.
Non-disclosure Agreement: A Non-disclosure Agreement is a legally binding contract that prohibits parties from sharing confidential information obtained during a business relationship, commonly required before sharing sensitive security findings or proprietary data.
Master Service Agreement: An umbrella contract established between a service provider and a customer that governs the overall business relationship and under which future work or services are conducted.
Statement of Work: A document tied to a master service agreement that defines the specific tasks, deliverables, timeline, and costs for a particular project or engagement.
Memorandum of Understanding: A Memorandum of Understanding is a non-binding agreement between parties that documents shared intentions, responsibilities, and expectations, commonly used in security contexts for information sharing, incident response coordination, and interagency cooperation.

Topics

Vendor Management Agreements Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →