Business Assessment SAQ Report

Business Assessment SAQ Report and Service Agreement

Parties and Assessment Details

Client Name:   Client Contact:

Assessor Name:   Assessor Organization:

Recitals

WHEREAS, Client Name: seeks an independent self-assessment questionnaire (SAQ) based evaluation of specified business practices, systems and controls; and

WHEREAS, Assessor Name: , acting through Assessor Organization: , has the qualifications to perform the assessment and provide the attached report; and

WHEREAS, the parties intend this Business Assessment SAQ Report to document findings, assign risk ratings, and set a corrective action plan subject to the terms and conditions set forth in this Agreement.

Scope of Work

The Assessor will conduct a structured SAQ-based assessment covering the areas listed below and any additional areas expressly agreed in writing. The assessment will include documentation review, interviews, and sampling as necessary to support findings and ratings.

Assessment Summary & Findings

Summary of overall posture, key strengths, and material weaknesses identified during the assessment. The Assessor's statements below reflect reasonable professional judgment based on evidence obtained during the assessment period.

SAQ Checklist and Compliance Status

For each domain below, check the box that best reflects the assessed status at time of review. Multiple boxes may be checked where partial compliance exists; the detailed findings provide clarification.

Governance and Policy

Compliant    Partial    Non-compliant

Access Control and Identity Management

Compliant    Partial    Non-compliant

Data Protection and Privacy

Compliant    Partial    Non-compliant

Network and System Security

Compliant    Partial    Non-compliant

Corrective Action Plan

For each finding, the party responsible shall prepare an action plan including target completion dates. The Assessor will perform a follow-up review where agreed.

Payment Terms

In consideration of the services provided by the Assessor, Client shall pay the Assessor the fees set forth below in accordance with the schedule. Fees are due in full in accordance with the schedule and unpaid amounts shall accrue interest as set out below. All fees exclude taxes unless otherwise indicated.

Term and Termination

This Agreement commences on the Start Date below and continues until the End Date unless terminated earlier in accordance with the notice provisions below.

Start Date:    End Date:    Notice Period:

Either party may terminate this Agreement for material breach if the breaching party fails to cure within the notice period specified above. Termination does not relieve Client of obligations to pay for services performed through the effective date of termination.

Confidentiality

Each party shall maintain in confidence all confidential information disclosed by the other party in connection with the assessment and shall not use such information except to perform obligations under this Agreement. Confidential information excludes information that is or becomes publicly available other than by breach of this Agreement, independently developed without use of the other party's confidential information, or rightfully received from a third party without restriction.

The Assessor may include non-identifying assessment methodology, aggregate statistics, and lessons-learned in internal process improvements provided no Client-identifying information is disclosed without prior written consent.

Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the jurisdiction indicated below without regard to conflicts of law principles.

Representations and Warranties; Entire Agreement

Each party represents that it has full power and authority to enter into this Agreement. The Assessor represents that services will be performed in a professional and workmanlike manner consistent with industry standards. Except as expressly provided, the Assessor does not warrant that the assessment will identify all vulnerabilities or guarantee future security.

This Agreement, including all attachments and the report, constitutes the entire agreement between the parties with respect to the subject matter and supersedes all prior and contemporaneous understandings, agreements, negotiations and discussions, whether written or oral.

Certification

The Assessor certifies that, to the best of its knowledge and based on evidence collected, the statements and findings in this report fairly and accurately reflect the results of the assessment performed in accordance with the scope described above.

Attachments and Records

Attachments (if any) containing detailed logs, sample evidence, and supporting documents form an integral part of this report and are incorporated by reference.

Sign Now