Security Level Agreement Template for New Zealand

1. Business Continuity and Disaster Recovery: Include when the security services are critical to business operations, specifying recovery time objectives and continuity procedures

2. Third-Party Management: Include when subcontractors or third-party providers are involved in delivering security services

3. Personnel Security: Include when specific security requirements for staff training, screening, or certifications are needed

4. Physical Security Requirements: Include when physical security measures are part of the service scope

5. Change Management: Include when formal procedures for security-related changes need to be specified

6. Insurance Requirements: Include when specific cybersecurity insurance coverage needs to be maintained

7. Exit Management: Include when complex transition arrangements are needed at the end of the agreement

1. Schedule 1 - Technical Security Requirements: Detailed technical specifications for security controls, systems, and configurations

2. Schedule 2 - Service Level Metrics and Calculations: Detailed methodology for measuring and calculating security service levels

3. Schedule 3 - Security Incident Response Plan: Detailed procedures and protocols for responding to different types of security incidents

4. Schedule 4 - Compliance Requirements: Specific compliance standards, certifications, and regulatory requirements

5. Schedule 5 - Fee Schedule: Pricing details, payment terms, and any security-related penalties or rewards

6. Appendix A - Contact Matrix: Key contacts and escalation procedures for security-related communications

7. Appendix B - Security Reporting Templates: Standard formats for security status reports and incident reports

8. Appendix C - Audit Checklist: Detailed checklist for security audits and assessments