Which document would most likely govern the security requirements for a cross-organizational IT connection?

Which document would most likely govern the security requirements for a cross-organizational IT connection?

• A. Interoperability Agreements
• B. Master Service Agreement (MSA)
• C. Interconnection Security Agreement (ISA)
• D. Memorandum of Understanding (MOU)

Answer: (C)

When two organizations plan to connect their IT systems, the document that standardizes the security requirements for that cross-organizational connection is the Interconnection Security Agreement. It formally specifies which security controls must be in place, who is responsible for implementing and maintaining them, and how data will be protected both in transit and at rest. It also covers identity and access management, incident response, monitoring, change control, and how the partnership will be terminated if needed. This agreement creates a concrete, enforceable framework so both sides know their duties and how security will be maintained across the linked systems. Interoperability agreements focus on technical compatibility and data formats, the master service agreement covers business terms and service delivery, and a memorandum of understanding is a broad, non-binding statement of cooperation. None of those set the explicit security requirements for a cross-organizational connection in the same binding, actionable way as an Interconnection Security Agreement.

When two organizations plan to connect their IT systems, the document that standardizes the security requirements for that cross-organizational connection is the Interconnection Security Agreement. It formally specifies which security controls must be in place, who is responsible for implementing and maintaining them, and how data will be protected both in transit and at rest. It also covers identity and access management, incident response, monitoring, change control, and how the partnership will be terminated if needed. This agreement creates a concrete, enforceable framework so both sides know their duties and how security will be maintained across the linked systems.

Interoperability agreements focus on technical compatibility and data formats, the master service agreement covers business terms and service delivery, and a memorandum of understanding is a broad, non-binding statement of cooperation. None of those set the explicit security requirements for a cross-organizational connection in the same binding, actionable way as an Interconnection Security Agreement.