Risk Assessment Matrix Update

RISK ASSESSMENT MATRIX UPDATE

Company Name:    Service Provider Name:

Document Analysis (Record of Update)

Purpose: This Risk Assessment Matrix Update documents modifications to the existing risk assessment matrix governing operational, technical, and business risks associated with the Services. It identifies updated risk ratings, revised mitigation measures, and the effective date of the update.

Applicable Agreement Reference: Agreement/Contract Reference Number:

WHEREAS

WHEREAS, the Company and the Service Provider previously adopted a Risk Assessment Matrix dated: to identify, evaluate and mitigate risks affecting the Services; and

WHEREAS, the Parties desire to update the Risk Assessment Matrix to reflect revised risk ratings, new mitigation measures, and changed likelihood or impact assessments, and to set forth the effective date and administrative controls applicable to the updated matrix; and

NOW, THEREFORE, in consideration of the mutual promises below, the Parties agree to the updates set forth in this Risk Assessment Matrix Update.

SCOPE OF WORK

UPDATED RISK MATRIX

The Parties document up to six (6) updated risk entries below. Each entry sets out the risk identifier, a concise description, prior and proposed ratings, and specific mitigation measures. Attach additional pages if necessary and list attachments in the scope above.

(Optional) Additional risks can be appended as attachments and referenced above. Attachments described in the Scope of Work are incorporated into this Update by reference.

PAYMENT TERMS

Consideration for the Services associated with this Update: Total Fee: (USD).

Late Payment: If any payment due under this Update is not received within days of the due date, the unpaid amount shall accrue interest at or the maximum rate permitted by applicable law, whichever is lower.

TERM AND TERMINATION

This Update is effective as of Effective Date: and shall remain in effect until End Date: unless earlier terminated in accordance with this section.

Either Party may terminate this Update for convenience upon providing written notice to the other Party at least days prior to the intended termination date. Termination does not relieve either Party of obligations accrued prior to the effective date of termination.

CONFIDENTIALITY

All information contained in the updated Risk Assessment Matrix, including risk descriptions, ratings, mitigation measures, and related analysis, constitutes Confidential Information of the disclosing Party. The receiving Party shall (a) use Confidential Information solely for purposes of performing its obligations under the underlying agreement and this Update; (b) restrict disclosure to employees, agents, or subcontractors with a need to know and who are bound by confidentiality obligations at least as protective as those herein; and (c) take commercially reasonable steps to protect the Confidential Information from unauthorized use or disclosure. Confidential Information does not include information that is publicly known through no breach by the receiving Party or that the receiving Party can demonstrate was lawfully obtained from a third party without restriction.

The Parties acknowledge that disclosure of certain risk information could materially affect business operations or security posture; therefore, disclosure to third parties beyond those necessary for remediation shall require prior written consent of the disclosing Party.

GOVERNING LAW

This Update and any dispute arising from or related to it shall be governed by and construed in accordance with the laws of: without regard to conflict of law principles.

ENTIRE AGREEMENT; AMENDMENT

This Risk Assessment Matrix Update, together with the underlying Agreement and any attachments expressly incorporated herein, constitutes the entire agreement between the Parties with respect to the subject matter hereof and supersedes all prior written or oral understandings related to the updated risk matrix. This Update may be amended only by a written instrument signed by authorized representatives of both Parties.

ACKNOWLEDGMENT

By signing below, each Party certifies that the updates reflected in this document have been reviewed and accepted by its authorized representative and that, upon execution, the updated Risk Assessment Matrix will be binding and incorporated into the Parties' risk management processes.

Acknowledged and Accepted: I confirm that I have authority to accept this Update on behalf of my Party.

Sign Now