Statement of Work — CAB-as-a-Service (Managed Service)
v1.3 • Generated 2025-09-06
Owner: Virtus Group Ltd • Audience: Clients, Reviewers & Operations • Classification: Public
Background
This SoW defines the managed service for CAB-as-a-Service between VGL and {CLIENT_NAME}.
Scope
- Onboarding & setup
- Monitoring & governance
- Monthly reporting
- Incident handling
- Continuous improvement
Out of Scope
- Third‑party licensing/fees excluded
- Client provides access/SMEs
- Variations via CVO
- Travel/disbursements per T&Cs
Assumptions & Dependencies
- Client provides timely access and SMEs
- Prerequisites completed before dependent tasks
- Variations handled via CVO
Service Levels & Reporting
- Monthly service report
- Incident response per SLA
- Quarterly improvements
Responsibilities & RACI
| Role | R | A | C | I |
|---|---|---|---|---|
| Client Sponsor | A | I | ||
| Client PM | C | I | ||
| Virtus PM | R | C | I | |
| Virtus Lead Consultant | R | C | I |
Commercials (Managed Service)
| Role | Rate (ex GST) | Est. Hours | Est. Total |
|---|---|---|---|
| Consultant | {{RATE_CONSULTANT}} | ||
| Senior Consultant | {{RATE_SENIOR}} | ||
| Project Manager | {{RATE_PM}} |
Invoicing monthly based on actuals.
Change Control
Out-of-scope work governed via CVO.
Evidence & References
- Assurance Index: https://cdn.virtusgroup.co.nz/resources/security/assurance/index/VirtusGroup_Security_Assurance_Index_v1_4.html
- Security Overview (NZISM/PSR): https://cdn.virtusgroup.co.nz/resources/services/security-continuity/security-overview/docs/VirtusGroup_Security_Overview_NZISM_v1_2.html
- Assurance Index v1.4; Security Overview; BCDR & IR artefacts as applicable.
- RTO/RPO targets: 24h / 4h
Acceptance
| Role | Name | Signature | Date |
|---|---|---|---|
| Client Signatory | {CLIENT_SIGN_NAME} | {EFFECTIVE_DATE} | |
| Virtus Signatory | {VIRTUS_SIGN_NAME} | {EFFECTIVE_DATE} |
© Virtus Group Ltd — Public master. Last updated 2025-09-06.