What does an MOU/ISA pair entail?

• A. A vendor contract for procurement.
• B. A memorandum of understanding focusing on responsibilities and an interconnection security agreement focusing on how interconnected systems will be secured.
• C. A data processing agreement.
• D. A service level agreement.

Answer: (B)

The main idea being tested is how organizations formalize both governance and security when two systems are connected. An MOU sets out who is responsible for what and how the parties will work together, while an interconnection security agreement specifies the security controls and requirements for the actual link between the systems. Together, they ensure clear accountability and concrete security measures for interconnections.

This pair is not about purchasing a vendor contract, terms for data processing between processors, or service level expectations. A vendor contract focuses on procurement terms, a data processing agreement on data handlers’ responsibilities, and a service level agreement on performance and uptime.