// English
Master Service Agreement
The umbrella agreement governing all engagements — term, fees, liability, IP, and legal terms.
Statement of Work
Scope, services, methodology, deliverables, timeline, fees, and compliance obligations per engagement.
Rules of Engagement
Operating rules during testing: authorized window, permitted and prohibited activities, data handling, escalation.
Authorization Form
Written authorization for specific targets — the document that makes testing lawful. Required before any scan.
Non-Disclosure Agreement
Mutual confidentiality covering findings, evidence, and all information shared during the engagement.
Data Processing Agreement
PDPA-compliant personal data processing terms between Controller and Processor (REDTEAM).
Report Structure
The standard structure of every REDTEAM deliverable — executive and technical, with evidence and remediation.
// Bahasa Malaysia
// How to use these documents
Sign the Authorization Form and Rules of Engagement before any testing begins. The SOW defines scope and deliverables; the MSA governs the relationship; the NDA covers confidentiality; the DPA covers personal data processing (PDPA). Findings are delivered per the Report Structure. All documents are templates — placeholders in [BRACKETS] are filled per engagement, and each version is available as a downloadable PDF. For questions, contact redteam@alesa.my.