1. On-Site Assessment Protocol: Required when assessment includes physical site visits, covering access rules and on-site procedures

2. Third-Party Tools and Licenses: Needed when specific third-party assessment tools will be used, detailing licensing and usage terms

3. Compliance Requirements: For assessments involving specific regulatory or industry standard compliance

4. Personnel and Qualifications: When specific expertise or certifications are required for the assessment team

5. International Data Transfer: Required when assessment involves cross-border data transfer

6. Business Continuity: When assessment might impact critical business systems

7. Change Management: For cases where assessment scope might need adjustment during the process

1. Schedule A - Technical Scope: Detailed technical specifications of systems to be assessed

2. Schedule B - Assessment Criteria: Specific criteria and benchmarks for the assessment

3. Schedule C - Fee Structure: Detailed breakdown of fees and payment milestones

4. Schedule D - Timeline: Detailed project timeline and milestone dates

5. Schedule E - Security Requirements: Specific security protocols and requirements

6. Appendix 1 - Assessment Tools: List and descriptions of tools to be used in the assessment

7. Appendix 2 - Report Templates: Templates and formats for assessment reports and deliverables

8. Appendix 3 - Contact Matrix: Key contacts and escalation procedures for both parties