A
security SLA defines contracted security obligations — availability guarantees, incident notification timeframes, data handling requirements, audit rights, breach response times.
SLAs are contractual — breach = legal liability. Key metrics: uptime (99.99% = ~52 min downtime/year), incident notification time (within 72 hours under GDPR), recovery time objectives.