A company expects its provider to ensure servers and networks maintain 97% uptime. Which of the following would most likely list this expectation?

A Service-Level Agreement (SLA) is a formal, binding contract between a service provider and a customer that explicitly defines the level of service expected. It quantifies the service's performance and availability through specific, measurable metrics. An uptime requirement, such as maintaining 97% availability for servers and networks, is a classic component of an SLA. The agreement also typically outlines remedies or penalties if the agreed-upon service levels are not met, ensuring accountability from the provider.

A. BPA: A Business Partnership Agreement (BPA) outlines the terms of a business partnership, such as profit sharing and operational roles, not specific technical service metrics like uptime.

B. MOU: A Memorandum of Understanding (MOU) is a non-binding document that expresses mutual intent and a common line of action; it lacks the specific, enforceable metrics of an SLA.

C. NDA: A Non-Disclosure Agreement (NDA) is a legal contract focused exclusively on ensuring the confidentiality of shared information and does not address service performance or availability.

1. CompTIA Security+ SY0-701 Exam Objectives

CompTIA. (2023). Objective 3.3

"Summarize the security implications of different architecture models

" lists "Service-level agreement (SLA)" as a key concept related to third-party and vendor relationships

which are governed by such agreements.

2. National Institute of Standards and Technology (NIST). (2003). Special Publication 800-35

Guide to Information Technology Security Services. Section 4.2

"Service-Level Agreements

" states

"SLAs specify the technical performance requirements of a service... Examples of performance criteria are availability (e.g.

99.9 percent uptime)

reliability

and response time."

3. University of California

Berkeley

Information Security Office. Vendor Security & Privacy Assessment Standard. The standard defines an SLA as a document that "sets the expectations between the service provider and the customer and describes the products or services to be delivered

the single point of contact for end-user problems

and the metrics by which the effectiveness of the process is monitored and approved." This aligns with the use of uptime percentages as a key metric.

4. National Institute of Standards and Technology (NIST). Glossary. Retrieved from https://csrc.nist.gov/glossary. The glossary defines a Memorandum of Understanding (MOU) as a document to "define their respective responsibilities in accomplishing a particular goal

" highlighting its role in defining responsibilities rather than quantifiable service metrics.