CompTIA Security+ (SY0-701)Security Program Management and OversightHard

Two government agencies want to formally document their mutual intent to share threat intelligence and collaborate on incident response, but neither party wants to create a legally binding contract with enforceable penalties. Which document BEST fits this situation?

  1. AMemorandum of Understanding (MOU)
  2. BService Level Agreement (SLA)
  3. CBusiness Partnership Agreement (BPA)
  4. DMaster Service Agreement (MSA)
Show answer & explanation

Correct answer: A. Memorandum of Understanding (MOU)

A Memorandum of Understanding documents mutual intent and expectations between parties without creating a legally enforceable contract, making it ideal for informal cooperative agreements.

Why the other options are wrong

  • B. An SLA defines measurable, enforceable service performance metrics, typically within a contractual relationship.
  • C. A BPA formally establishes a legal partnership with defined roles, responsibilities, and liabilities between businesses.
  • D. An MSA is a legally binding overarching contract that governs future detailed agreements between business partners.

Memorandum of Understanding (MOU)

A document expressing mutual intent and understanding between two or more parties without creating a legally binding, enforceable contract.

  • Less formal and generally not legally enforceable, unlike an MSA or BPA
  • Often used between government agencies or non-commercial partners
  • Commonly used to outline general cooperation goals or information sharing

Memory trick: MOU = 'Mostly Optional Understanding' — friendly, not binding.

More Security Program Management and Oversight questions