MTA-ROEVisibility: public
When to Use
Mandatory before any penetration testing or vulnerability assessment begins.
Primary Use
Legal authorization framework defining scope, boundaries, and permissible actions for ethical hacking engagements.
Key Clauses
- →Explicit scope definition (IP ranges, applications, exclusions)
- →Testing windows and emergency contact protocols
- →No production disruption / no denial-of-service clause
- →Data handling and destruction obligations (7-day deletion post-test)
- →Breach notification without undue delay
Governing Laws
IT Act, 2000 (Sections 43 & 66)Indian Contract Act, 1872DPDPA, 2023
Companion Agreements
MTA-CSMTA-NDAMTA-DPA