Appendix O
413
16. Does the contract with the MSSP address potential termination of the
contract and how that would be handled?
Guidance:
For the company’s own protection, the contract with the MSSP
should have adequate provisions for adjusting or terminating the contract
as necessary. There are circumstances where it might be appropriate for the
company to either adjust or terminate the contract. For example, if the
company was acquired and the acquiring company had a state-of-the-art
SOC, it might make sense to leverage the SOC and either reduce the scope
of the contract or terminate it altogether. Another example is if a series of
security incidents occurred where the MSSP was at fault. In this case, the
company should have some form of recourse such as being able to termi-
nate the contract.
Risk:
The risk associated with not having a provision in the contract for
adjusting or terminating the contract is that as the company’s circumstanc-
es change or if the MSSP’s service is not up to par, the company might
have a limited ability to adjust or terminate the MSSP services without in-
curring a penalty.
Client Response:
AU1706_book.fm Page 413 Tuesday, August 17, 2004 11:02 AM
AU1706_book.fm Page 414 Tuesday, August 17, 2004 11:02 AM
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.