1. Personnel and Subcontractors: Used when specific personnel requirements exist or when subcontractors may be involved in the assessment

2. Insurance Requirements: Included when specific insurance coverage needs to be maintained by either party

3. Data Processing Agreement: Required when the assessment involves processing of personal data under GDPR

4. Change Control: Included for longer or complex assessments where scope changes may be anticipated

5. Force Majeure: Added when specific provisions for unforeseen circumstances are needed

6. Non-Solicitation: Used when there's a need to prevent hiring of personnel between parties

7. Business Continuity: Included when assessment activities might impact critical business operations

8. Compliance with Specific Regulations: Added when assessment must comply with specific industry regulations or standards

1. Schedule 1 - Scope of Assessment: Detailed technical scope including systems, networks, and processes to be assessed

2. Schedule 2 - Assessment Methodology Details: Specific testing procedures, tools, and frameworks to be used

3. Schedule 3 - Deliverables: Detailed description of all reports and other outputs to be provided

4. Schedule 4 - Fee Schedule: Detailed breakdown of fees, expenses, and payment milestones

5. Schedule 5 - Project Timeline: Detailed project plan with specific dates and milestones

6. Schedule 6 - Security Requirements: Specific security protocols to be followed during the assessment

7. Appendix A - Testing Tools: List of approved tools and software to be used in the assessment

8. Appendix B - Report Templates: Standard formats for various reports and documentation

9. Appendix C - Contact Details: Key personnel and escalation contacts for both parties