TechKnowSurge
CompTIA Security+ 5.3 NIST NICE K0872 CompTIA Security+ 5.4
InteractiveSecurityFree

Service, Operations or Privacy?

One clause per card. Does it belong in an SLA, an OLA or a PLA?

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

Three agreements, three questions. A service level agreement (SLA) says what level of service the provider promises its customers: uptime, response times, how fast a lost file comes back, and the credit owed when a target is missed. It is very common: customers expect to see one. An operational level agreement (OLA) is about how those promises get kept. It is an internal agreement between teams inside the provider, such as the network team and the help desk, setting what each will do for the other so the SLA can be met. The lesson's example is a university IT department's OLA, with its services, dependencies, responsible parties and incident handling. OLAs are much less common, and they go by many names. A privacy level agreement (PLA) sets what a provider commits to about the personal data it handles for a customer: where it is stored, who may see it, how long it is kept, which subcontractors touch it and how fast the customer hears about a breach. PLAs are rare; the same promises often sit in a privacy policy or another agreement. To sort a clause, ask whose promise it is and what it is about: a level of service to customers is the SLA; one team's commitment to another inside the provider is the OLA; the handling of personal data is the PLA.

What you'll learn

Aligned to

CompTIA Security+
5.3 Explain the processes associated with third-party risk assessment and management.
5.4 Summarize elements of effective security compliance.
NIST NICE
K0872 Knowledge of service management principles and practices

Key terms

Service Level Agreement
SLA
A formal commitment between a provider and customer that guarantees a defined level of service uptime, including terms for compensation if the standard is not met.
Operational Level Agreement
OLA
An internal agreement that defines the responsibilities and service expectations between departments within the same organization in support of an SLA.
Privacy Level Agreement
PLA
An agreement between an organization and a service provider that defines expectations and requirements for how personal or sensitive data will be handled and protected.

Topics

Service Level Agreement Operational Level Agreement Privacy Level Agreement Vendor Management Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →