Comprehensive Detailed A Service Level Agreement (SLA) defines the expectations, requirements, and metrics for third-party services, including response times and responsibilities during an event. Here's an overview of each option:
A . BIA (Business Impact Analysis)
BIA is used to assess potential impacts of disruptions to business operations, but it does not specify third-party response requirements.
B . DRP (Disaster Recovery Plan)
DRP provides recovery procedures for internal systems and services but does not directly establish third-party obligations.
C . SLA (Service Level Agreement)
SLAs set clear expectations for third-party services, including response times, performance metrics, and specific requirements during incidents. SLAs ensure accountability for external providers during critical events.
D . MOU (Memorandum of Understanding)
An MOU defines general terms and intentions between parties but lacks the specific performance metrics required in an SLA.
Reference:
NIST SP 800-37: Risk Management Framework, on the role of SLAs in managing third-party risk.
ITIL Service Design: Importance of SLAs for defining service performance and response requirements.