1. Business Continuity and Disaster Recovery: Include when the security services are critical to business operations, detailing backup and recovery procedures

2. Third-Party Service Providers: Include when subcontractors or third-party security tools are used in service delivery

3. Physical Security Requirements: Include when physical security services or access control are part of the scope

4. Training and Awareness: Include when security awareness training or staff certification requirements are part of the service

5. Intellectual Property Rights: Include when proprietary security tools or technologies are involved

6. Export Control Compliance: Include when security services involve international data transfers or technology exports

7. Change Management: Include when regular updates to security systems or procedures are anticipated

1. Schedule 1 - Technical Security Specifications: Detailed technical requirements, security configurations, and system specifications

2. Schedule 2 - Service Level Metrics and Calculations: Detailed formulas and methods for calculating service level performance

3. Schedule 3 - Incident Classification and Response Times: Categories of security incidents and corresponding response time requirements

4. Schedule 4 - Fee Schedule: Detailed pricing, payment terms, and penalty calculations

5. Schedule 5 - Contact Details and Escalation Procedures: Key contacts and detailed escalation procedures for different types of security incidents

6. Schedule 6 - Security Policies and Procedures: Specific security policies, procedures, and guidelines to be followed

7. Schedule 7 - Compliance Requirements: Detailed compliance requirements and reporting templates

8. Appendix A - Security Incident Report Template: Standard template for reporting security incidents

9. Appendix B - Performance Report Template: Standard template for regular security performance reporting