TechKnowSurge
CompTIA Security+ 5.3 NIST 800-53 CA-3 ISC2 CISSP 1.4
InteractiveSecurityFree

Which Agreement Now?

Two companies on the way to a partnership. Which agreement fits each point: NDA, MOU, BPA or ISA?

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

A business partnership needs different agreements at different points, as the business partner example lesson walks through. Non-disclosure agreement (NDA). Talks about a partnership mean sharing things that could hurt you if they got out: trade secrets, customers, figures, or the fact that talks are happening at all. An NDA, signed early and before anything sensitive is shared, binds the parties not to pass it on. NDAs are often mutual, since both sides share, and are often written into a master service agreement. Memorandum of understanding (MOU). Once both sides want to go ahead, a handshake conveys little. An MOU writes down what the partnership is aiming for while the details are still being negotiated. It is not legally binding. Business partners agreement (BPA). Before the partners start producing or selling together, they sign the legally binding contract: how the relationship works, the financial obligations, and how roles and responsibilities are split. Interconnection security agreement (ISA). Many partnerships never connect their systems. If they do, connecting another company's network to yours exposes you to its weaknesses, so an ISA sets how the systems connect, the security each side keeps and the timing, as in the USDA example of connecting to a government system. To choose, ask what is about to happen: sensitive information shared, a plan agreed in principle, the partnership starting to operate, or systems connected.

What you'll learn

Aligned to

CompTIA Security+
5.3 Explain the processes associated with third-party risk assessment and management.
NIST 800-53
CA-3 Information Exchange
ISC2 CISSP
1.4 Understand legal, regulatory, and compliance issues that pertain to information security in a holistic context

Key terms

Non-disclosure Agreement
NDA
A Non-disclosure Agreement is a legally binding contract that prohibits parties from sharing confidential information obtained during a business relationship, commonly required before sharing sensitive security findings or proprietary data.
Memorandum of Understanding
MOU
A Memorandum of Understanding is a non-binding agreement between parties that documents shared intentions, responsibilities, and expectations, commonly used in security contexts for information sharing, incident response coordination, and interagency cooperation.
Business Partnership Agreement
A formal contract between two parties that defines each party's responsibilities, expectations, and how disputes will be resolved when doing business together.
Interconnection Security Agreement
ISA
A formal agreement between two organizations that specifies the technical and security requirements for connecting their IT systems, defining each party's responsibilities for protecting shared data in transit.

Topics

Non Disclosure Agreement Interconnection Security Agreement Business Partnership Agreement Memorandum Of Understanding Third Party Risk Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →