PAKISTAN CLOUD FIRST POLICY Annex F – Minimum Suggested Requirements for Contracts a. CSP’s adherence to the due diligence process and conformity of public procurement guidelines/processes; b. a clear description of services to be provided; c. the contract’s duration (unless it is of unlimited duration); d. payment terms and termination and dispute settlement mechanism; e. details on the available Service Level Agreements (SLAs); f. rules on handling cloud customer data, including their processing, destruction, and restoration; g. CSP’s customer care services depending on a particular service offering; h. customers’ right to retrieve their data stored in the CSP’s system, if the cloud contract is terminated; and i. limitation of CSPs’ right to exclude their liability unreasonably or to impose unfair contract terms related, for instance, to any loss of, or damage to, customer’s data, quality of service degradations such as service unavailability, or data breaches. NOTE: a bit clustered Page 21 of 21