Master Services Agreement

RM Cyber treats all client data, systems information, and security findings as strictly confidential under the terms of this Agreement. Both parties agree not to disclose confidential information to third parties without prior written consent, and RM Cyber personnel are bound by confidentiality obligations that survive the termination of this Agreement.

RM Cyber's liability under this Agreement is limited to direct damages not exceeding the total fees paid by the Client in the three months preceding the claim. Neither party shall be liable for indirect, incidental, or consequential damages arising from services rendered under this Agreement, except in cases of gross negligence or willful misconduct.

RM Cyber delivers services in alignment with applicable regulatory frameworks, including NIST, CMMC 2.0, GLBA, GDPR, and other relevant standards. Where compliance support is included in a Statement of Work, RM Cyber will provide guidance and documentation to support the Client's regulatory obligations, though the Client retains ultimate responsibility for its own compliance posture.

Either party may terminate this Agreement with thirty (30) days written notice, provided that any active Statements of Work are completed or separately terminated in accordance with their individual terms. RM Cyber reserves the right to terminate immediately in cases of non-payment or material breach, and all confidentiality and intellectual property obligations shall survive termination.

RM Cyber maintains strict data protection obligations in accordance with applicable laws and regulations, including GLBA and GDPR where relevant. Client data accessed during the course of services is handled under defined confidentiality provisions, and RM Cyber implements appropriate technical and organizational safeguards to prevent unauthorized access, disclosure, or misuse of sensitive information.

Under this Master Services Agreement, RM Cyber's incident response responsibilities are defined by the specific services engaged and outlined in the applicable Statement of Work. Clients are responsible for promptly notifying RM Cyber of any known or suspected security incidents, and RM Cyber will provide support in accordance with the agreed scope, timelines, and escalation procedures documented within the engagement.

Deliverables specifically created for the client and identified as work product within the applicable Statement of Work are assigned to the client upon receipt of full payment. RM Cyber retains ownership of its pre-existing methodologies, tools, frameworks, and proprietary processes. Any general knowledge, skills, or techniques developed during an engagement remain the property of RM Cyber and may be applied to future client work.

In the event of a dispute arising under this Master Services Agreement, both parties agree to first attempt resolution through good-faith negotiation at the management level. If the dispute cannot be resolved informally within thirty days, the parties may pursue mediation prior to initiating formal legal proceedings. This agreement is governed by the laws of the applicable jurisdiction as specified in the MSA.

Either party may terminate this Master Services Agreement by providing written notice as specified in the agreement, subject to the terms outlined for active Statements of Work. Termination for cause may occur immediately upon written notice if either party materially breaches the agreement and fails to cure such breach within the designated cure period. Fees for services rendered prior to termination remain due and payable.