Which document requires organizations to specify the technical requirements for IT system interconnection?

Which document requires organizations to specify the technical requirements for IT system interconnection?

• A. Master Service Agreement (MSA)
• B. Memorandum of Understanding (MOU)
• C. Interoperability Agreements
• D. Interconnection Security Agreement (ISA)

Answer: (D)

When two organizations connect IT systems, there must be a formal agreement that specifies how the connection will be secured and what technical requirements apply. This is captured in an Interconnection Security Agreement, which lays out the security controls, data flows, boundary protections, roles and responsibilities, and how the interconnection will be monitored and maintained. It ensures both sides understand what needs to be implemented to protect data as it moves across the connection and how incidents are handled. The other documents serve different purposes: a Master Service Agreement covers commercial terms and service delivery; a Memorandum of Understanding is a non-binding statement of intent; an Interoperability Agreement focuses on how systems work together but may not detail the security requirements of the interconnection as comprehensively as an ISA.

When two organizations connect IT systems, there must be a formal agreement that specifies how the connection will be secured and what technical requirements apply. This is captured in an Interconnection Security Agreement, which lays out the security controls, data flows, boundary protections, roles and responsibilities, and how the interconnection will be monitored and maintained. It ensures both sides understand what needs to be implemented to protect data as it moves across the connection and how incidents are handled. The other documents serve different purposes: a Master Service Agreement covers commercial terms and service delivery; a Memorandum of Understanding is a non-binding statement of intent; an Interoperability Agreement focuses on how systems work together but may not detail the security requirements of the interconnection as comprehensively as an ISA.