Cybersecurity Ransomware Questionnaire

CYBERSECURITY RANSOMWARE QUESTIONNAIRE AND SERVICE AGREEMENT

This Agreement and Questionnaire is entered into by and between Client Name: and Service Provider Name: . Effective Date:

WHEREAS

WHEREAS, Client seeks to evaluate and enhance its cybersecurity posture specifically addressing ransomware risk, recovery objectives, and incident response readiness; and

WHEREAS, Service Provider is engaged in the business of providing cybersecurity assessment, incident response planning, and related services and has represented that it has the expertise and resources to perform the services described in this Agreement and Questionnaire; and

WHEREAS, the parties intend for the responses in this Questionnaire to inform the Scope of Work and to be incorporated into the deliverables and incident response planning undertaken by Service Provider.

SCOPE OF WORK

RANSOMWARE QUESTIONNAIRE

Primary Technical Contact: Phone: Email:

Has the organization experienced a ransomware or extortion incident in the past 36 months? Yes No

Was a ransom demanded or paid? Yes No If paid, amount:

Are backups performed for critical systems? Yes No

Yes No

Endpoint detection and response (EDR) deployed? Yes No

Is a centralized logging/SIEM solution in use? Yes No

Are multi-factor authentication controls enforced for remote access and privileged accounts? Yes No

Is there a documented patch management program? Yes No Last major patch cycle completed:

Does the organization maintain cyber insurance? Yes No

Target Recovery Time Objective (RTO) in hours: Target Recovery Point Objective (RPO) in hours:

Does an incident response playbook exist that addresses ransomware specifically? Yes No

PAYMENT TERMS

Total Fee for Services:

Late payment shall incur interest at: and reasonable collection costs.

TERM AND TERMINATION

Start Date: End Date:

Either party may terminate this Agreement for material breach if the breaching party fails to cure within the notice period above. Termination shall not relieve Client of payment for services performed prior to termination.

CONFIDENTIALITY

Each party shall maintain in confidence all non-public information disclosed by the other party in connection with this Agreement, including findings, exploitation data, forensic artifacts, and vulnerability assessments. Confidential information shall not be disclosed except to employees, contractors, or advisors with a need to know who are bound by confidentiality at least as protective as this clause. Confidentiality obligations survive termination for a period of three (3) years, except for trade secrets which shall remain protected for as long as permitted by law.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the jurisdiction selected by Client and Service Provider. To indicate the selected jurisdiction, insert state or jurisdiction below:

ENTIRE AGREEMENT

This document, including the completed Questionnaire and any attachments expressly incorporated herein, constitutes the entire agreement between the parties with respect to the subject matter and supersedes all prior and contemporaneous agreements and understandings, whether written or oral. Any amendment must be in writing and signed by authorized representatives of both parties.

CERTIFICATION

The undersigned certify that the answers provided in this Questionnaire are true and complete to the best of their knowledge, and acknowledge that Service Provider will rely on these responses in planning assessments, recommendations, and incident response services. Any material omission or misstatement may affect the scope and effectiveness of the services and may be grounds for termination.

Sign Now