SECAI Core · phase 8 of 15
Service level agreement
Operating procedures and standards for a service contract.
The Explain card
- Plain English
- A service level agreement (SLA) sets the operating procedures and measurable standards a provider commits to in a service contract: uptime, response times, support hours and what happens when targets are missed.
- Example
- A company buys hosted LLM inference. The SLA promises a specific availability percentage, a maximum latency per request, notification within a fixed period of any security incident affecting customer data, and service credits if the vendor falls short.
- Why it matters
- Your AI system is only as reliable and secure as the services beneath it. SLAs are where defenders write in breach notification, data handling and availability guarantees, and where they gain leverage when a vendor fails.
- Hook
- The promise with a penalty clause.
Where it sits in the deck
Phase 8: Governance, Risk, and Compliance Frameworks
Individual controls need a governance envelope — introduce the risk and compliance structures, standards bodies, and regulations that frame AI accountability at scale.