Customer, Vendor or Partner?

About this interactive

A company has three kinds of business relationship, the lesson says. Customers, or clients, are the ones it provides services and products to. Vendors supply services and products to it. Partners work with it toward a common goal, with services and products going both ways. In every one of them, both sides need to know what to expect, the way you expect a certain meal for the price at a restaurant. So the expectations are written down in agreements: a privacy policy, terms of service, a master service agreement, a non-disclosure agreement, an interconnection security agreement, a statement of work, a service level agreement, a memorandum of understanding, an end-user license agreement, a data retention policy, and others. The same kind of agreement can appear in any relationship. An SLA you give your customer and an SLA your hosting company gives you are the same kind of document, read from opposite sides. So the agreement's name does not decide the relationship: who provides to whom does. These activities read every card from your company's side. Breaking an agreement has consequences, from fines and lost contracts to reputation damage, and the agreements protect both sides.

What you'll learn

Tell which business relationship an agreement sets expectations for: a customer the company provides to, a vendor that provides to the company, or a partner it works with toward a shared goal

Aligned to

CompTIA Security+

5.3 Explain the processes associated with third-party risk assessment and management.

Key terms

Service Level Agreement: A formal commitment between a provider and customer that guarantees a defined level of service uptime, including terms for compensation if the standard is not met.
Statement of Work: A document tied to a master service agreement that defines the specific tasks, deliverables, timeline, and costs for a particular project or engagement.
Non-disclosure Agreement: A Non-disclosure Agreement is a legally binding contract that prohibits parties from sharing confidential information obtained during a business relationship, commonly required before sharing sensitive security findings or proprietary data.
Memorandum of Understanding: A Memorandum of Understanding is a non-binding agreement between parties that documents shared intentions, responsibilities, and expectations, commonly used in security contexts for information sharing, incident response coordination, and interagency cooperation.
Master Service Agreement: An umbrella contract established between a service provider and a customer that governs the overall business relationship and under which future work or services are conducted.
Interconnection Security Agreement: A formal agreement between two organizations that specifies the technical and security requirements for connecting their IT systems, defining each party's responsibilities for protecting shared data in transit.
End User License Agreement: A legal contract between a software provider and the end user that defines the permitted uses and restrictions of the software.
Privacy Policy: A document that discloses how an organization collects, uses, and manages the data of visitors, customers, and other external parties.

Topics

Agreements Third Party Management Compliance Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →