Monthly Managed Security Plan Agreement

1Parties and summary

This Monthly Managed Security Plan Agreement (the "Agreement") is made on ____________ (the "Effective Date") between Cybersecurity Network, a Florida company serving clients in all 50 states ((833) 365-7047) (the "Provider"), and ______________________ (the "Client").

The Monthly Managed Security Plan bundles ongoing protection for one monthly price: email protection, employee security training, monitoring and a named point of contact.

2Services

The Provider will deliver the following for the Client:

1. Email protection. InboxGuard checks on every covered Microsoft 365 mailbox, as described in the InboxGuard agreement.
2. Employee training. Short monthly security lessons and practice phishing emails for every covered employee.
3. Monitoring. Security alerts reviewed by the team, with response actions the Client approves.
4. Quarterly review. A meeting every 3 months to review results, risks and next steps.
5. Point of contact. One named person who knows the Client's business and answers its calls.

3Client responsibilities

• Name a security contact and a backup.
• Give employees time to complete monthly training.
• Approve access to Microsoft 365 and covered devices.
• Report staff and device changes within 5 business days.

4Fees, billing and term

Billing. Invoices are due within 15 days. Monthly plans are billed in advance. After 30 days past due, service may be paused with 10 days' written notice.

Term. The first term is 12 months, then renews month to month. After the first term, either party may cancel with 30 days' written notice.

Price changes. 30 days' written notice before any price change.

5Data, privacy and confidentiality

Only the data each service needs is collected, kept no longer than 90 days unless the law requires otherwise, and used only to protect the Client.

Client data is used only to provide this service and is never sold. It is stored on access-restricted U.S. servers and sent over encrypted connections. Each party keeps the other's business information private during this Agreement and for 2 years after it ends.

6Limits of service and liability

The plan greatly lowers risk. No security service can stop every threat, so preventing every incident is not guaranteed.

Each party's total liability is limited to the fees paid in the 3 months before a claim. Neither party is liable for lost profits or indirect damages.

7General terms

Nationwide service. The Provider serves clients in all 50 states and Washington, D.C. Services may be delivered remotely or on site, by the Provider's team or by qualified, vetted partners bound by the same confidentiality terms.

Governing law. This Agreement is governed by the laws of the State of Florida, where the Provider is incorporated, without regard to conflict-of-law rules. Any dispute will be resolved in the state or federal courts of Florida, unless both parties agree in writing to another venue or to binding arbitration. Where the law of the Client's state requires otherwise, that law applies to the extent required.

Whole agreement. This Agreement and Schedule A are the full agreement; changes must be in writing and signed by both parties. If any part is found unenforceable, the rest stays in effect.

Assignment. Neither party may transfer this Agreement without the other's written consent, except to a successor of its business.

Independent parties. The Provider acts as an independent contractor.

Schedule A: Service details

Signatures

More sample contracts

• Managed EDR