I'm a lawyer interested in information security, and am collecting templates and examples of security testing agreements to compare. What are some publicly available examples, or nuggets of wisdom from your own practices?
Why I'm asking
I'm looking to compare forms of agreements and then distill their common ingredients. With that, I intend to put together a draft template of my own, or at least publish some thoughts on the subject. I'm not being lazy or doing this for a client project.
I have already Googled the question. (One cannot survive modern law school without expert Googling.) I'm looking for a bit deeper knowledge here.
Is this question on-topic?
I think this question is on-topic because it's about the business of information security -- but if people disagree, I'd appreciate a pointer to a more appropriate place. Quoting directly from this community's "on-topic" help article:
Laws - Answers on laws, regulations and licencing should not be taken as legally binding - we're security professionals so deal with legal issues, but this site is not a law site.
To me, that implies it's fine to ask questions about law as long as you use common sense in interpreting the answers.