��������Ƶ

1. Cloud Services Integration: Required when services include cloud-based security solutions, addressing CCRF compliance

2. Critical Infrastructure Protection: Necessary when services involve critical national infrastructure or essential services

3. Third-Party Service Provider Management: Required when subcontractors or third-party services are involved in service delivery

4. Business Continuity and Disaster Recovery: Optional unless specifically required by customer's industry regulations

5. Training and Knowledge Transfer: Include when service includes staff training or capability building

6. Physical Security Requirements: Necessary when services include on-premises security components

7. Source Code Security: Required when services include application security testing or development security

8. International Data Transfer: Include when services involve cross-border data transfers

1. Schedule A - Service Specifications: Detailed technical specifications of security services, tools, and technologies

2. Schedule B - Service Level Targets: Specific metrics, KPIs, and performance targets with calculation methodologies

3. Schedule C - Pricing and Payment Schedule: Detailed fee structure, payment terms, and service level credits

4. Schedule D - Security Controls and Compliance Requirements: Specific security controls mapped to ECC requirements and other applicable standards

5. Schedule E - Incident Response Procedures: Detailed procedures for different types of security incidents and escalation matrices

6. Schedule F - Contact Details and Escalation Matrix: Key personnel contact information and escalation procedures

7. Appendix 1 - Technical Infrastructure Overview: Documentation of security infrastructure and architecture

8. Appendix 2 - Reporting Templates: Standard formats for security reports and documentation

9. Appendix 3 - Compliance Certificates: Copies of relevant certifications and compliance documentation