3.2 Explain the purpose of organizational documents and policies

Question 1

The Chief Information Officer canceled a contract with a third-party vendor since they refused to sign a contract to limit what uses of sensitive data are permitted, what storage and distribution restrictions to enforce, and what penalties to incur for breaches of the agreement. What kind of contact did the vendor fail to sign?

AUP

NDA

MOU

SLA

Answer 1

A non-disclosure agreement (NDA) is the legal basis for protecting information assets. It defines what uses of sensitive data are permitted, what storage and distribution restrictions to enforce, and what penalties will incur with breaches of the agreement.

A memorandum of understanding (MOU) is a preliminary or exploratory agreement to express an intent to work together. MOUs usually intend to be relatively informal and not to act as binding contracts.

A service level agreement (SLA) is a contractual agreement setting out the detailed terms provided under an ongoing service.

An acceptable use policy (AUP) sets out the permitted uses of a product or service. It might also state explicitly prohibited uses.