Security Awareness Training Handout

Security Awareness Training Handout and Services Agreement

WHEREAS, Provider Name: is engaged in the business of delivering information security awareness training and related instructional materials; and

WHEREAS, Client Name: desires to procure such training for its employees and contractors subject to the terms set forth in this document; and

WHEREAS, the parties intend for this document to describe the scope, deliverables, payment terms, confidentiality obligations and other material terms governing the delivery of security awareness services.

Parties and Contact Information

Scope of Work

Provider will prepare and deliver security awareness training and accompanying materials tailored to the Client's personnel. Training deliverables include instructor-led presentation(s), participant handouts, and an electronic assessment where applicable. Detailed deliverables, schedule and acceptance criteria are set forth below and in the scope text box.

Training Topics and Minimum Content

The training shall, at minimum, cover the following topics. Provider certifies that each topic checked will be included in the delivered materials.

Payment Terms

Total Fee: $ . Payment shall be made in accordance with the schedule below.

Late Payment: If any undisputed amount is not paid within days after due date, interest will accrue at or the maximum allowable rate, whichever is lower. Client agrees to reimburse Provider for reasonable collection costs.

Term and Termination

This Agreement commences on Start Date: and continues until End Date: unless earlier terminated as provided herein.

Either party may terminate this Agreement for convenience upon providing written notice not less than days to the other party. Either party may terminate immediately for material breach that remains uncured after a reasonable cure period of not less than 15 days following written notice of breach.

Confidentiality

Each party (the "Recipient") shall hold in confidence all Confidential Information disclosed by the other party (the "Discloser") and shall not use or disclose such information except as necessary to perform obligations under this Agreement. Confidential Information includes training materials, assessment results, client personnel data and other non-public information. The Recipient shall apply at least the same degree of care as it uses to protect its own confidential information, but in no event less than reasonable care. This obligation survives termination for a period of three years.

Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the State of , excluding conflict of law principles that would require the application of another jurisdiction's law.

Entire Agreement

This document, together with any attachments and mutually executed statements of work, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior oral and written agreements, proposals and communications. Any amendment must be in writing and signed by authorized representatives of both parties.

Key Security Practices (Handout)

The following practical guidance should be reinforced during and after training:

- Recognize suspicious email indicators: unexpected attachments, mismatched sender addresses, unsolicited requests for credentials, and urgent or fear-based language. When in doubt, verify by an independent channel.

- Use unique, complex passwords and enable multi-factor authentication (MFA) wherever available. Use a reputable password manager to generate and store credentials.

- Keep devices and applications patched; install security updates promptly. Disable unused services and only install approved software.

- Protect sensitive information: do not transmit confidential data via unencrypted personal email or unapproved file-sharing services. Follow Client data classification and retention policies.

Incident Reporting and Support

Employees must report suspected security incidents immediately to Client's security contact or Provider's appointed representative for coordination. Timely reporting enables containment and mitigation.

Attendee Acknowledgment (Optional Template)

Attendee Name:

Job Title: Department:

Training Date:

I hereby acknowledge that I have attended the security awareness training and understand the procedures for recognizing and reporting security incidents. I acknowledge

Representations and Warranties

Provider represents that it has the requisite experience and personnel to perform the services described herein and will perform in a professional manner consistent with industry standards. Client represents that it has authority to engage Provider and will cooperate in scheduling, provide access to personnel and necessary facilities and supply any Client-specific materials in a timely fashion.

Limitation of Liability

Except for liability resulting from gross negligence or willful misconduct, each party's aggregate liability for claims arising out of this Agreement shall be limited to the total fees paid by Client to Provider under this Agreement during the six-month period preceding the claim.

Sign Now