Security Assessment Survey

Security Assessment Survey and Service Agreement

Parties and Effective Date

This Security Assessment Survey and Service Agreement (the Agreement) is entered into effective as of (Effective Date), by and between Client Name: and Assessor: .

Recitals

WHEREAS, Client desires a comprehensive evaluation of the security posture of specified information systems, physical facilities, policies and procedures; and

WHEREAS, Assessor is duly experienced and qualified to perform security assessments, vulnerability testing, and related consulting services; and

NOW, THEREFORE, in consideration of the mutual covenants set forth herein, the parties agree as follows.

Scope of Work

Assessor shall perform the services described below (Services). Services shall be performed in a professional manner consistent with industry standards and pursuant to the methodology identified in this Section.

Assessment Details and Methodology

Assessment types to be performed (check all applicable):
Network vulnerability scanning and penetration testing
Application security testing (static/dynamic)
Physical security assessment
Social engineering / phishing tests
Policy and procedure review
Cloud configuration review

Deliverables and Schedule

Final deliverables shall include an executive summary, detailed findings with risk ratings, remediation recommendations, and a remediation verification plan. Deliverable format:

Payment Terms

Client agrees to pay Assessor fees as set forth below. Fees are exclusive of applicable taxes and reimbursements for reasonable travel and expenses unless otherwise stated.

Late payments shall accrue interest at (monthly) on any unpaid balance, and Client shall reimburse Assessor for reasonable collection costs.

Term and Termination

The term of this Agreement begins on Start Date: and shall continue until End Date: unless earlier terminated in accordance with this Section.

Either party may terminate for convenience upon days' prior written notice. Either party may terminate immediately for material breach if the non-breaching party provides written notice and the breach is not cured within days. Upon termination, Client shall pay Assessor for Services performed through the effective date of termination and for any non-cancellable commitments reasonably incurred.

Confidentiality

"Confidential Information" means non-public information disclosed by one party to the other in connection with this Agreement, including assessment results, vulnerabilities, remediation plans, and internal operational information. Each party shall (i) hold Confidential Information in strict confidence, (ii) not disclose Confidential Information except to its employees, contractors, or advisors who have a need to know and who are bound by confidentiality obligations no less protective than those herein, and (iii) use Confidential Information solely for the performance or receipt of the Services. Confidential Information shall not include information that is or becomes generally known to the public through no fault of the receiving party, or that is rightfully obtained by the receiving party from a third party without restriction.

Limitations of Liability

Except for liability arising from intentional misconduct or willful breach of confidentiality, each party's aggregate liability under this Agreement shall not exceed the total fees paid to Assessor under this Agreement. Neither party shall be liable for consequential, incidental, special or punitive damages.

Reporting, Remediation Verification, Data Retention

Governing Law and Entire Agreement

This Agreement shall be governed by and construed in accordance with the laws of the State of , without regard to conflict of law principles. The parties irrevocably submit to the exclusive jurisdiction of the courts located within that State for the resolution of any disputes arising out of this Agreement.

This Agreement, including all schedules and attachments, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, understandings and proposals, whether written or oral. Any amendment must be in writing and signed by both parties.

Client Authorization and Acknowledgments

Client represents and warrants that it has authority to engage Assessor to perform the Services and, where on-site access or testing of third-party systems is involved, Client will obtain necessary consents and authorizations prior to testing. Client acknowledges that some testing activities may cause temporary service disruption; Assessor will exercise reasonable care to minimize disruption but cannot guarantee zero impact.

Sign Now