You're currently in Business Support. For help with a consumer service, visit our

Managed Cloud Security - Service Terms

Service Terms

The terms in this section, called the “service terms”, apply to a group of services or a specific service within a group.

1.0 TELUS Managed Cloud Security

The following service terms apply to a TELUS Managed Cloud Security Service (“
TELUS Managed Cloud Security Service
”).

1.1 General Description

TELUS Managed Cloud Security Service is a TELUS managed security service, powered by a Software-as-a-Service-based (SaaS-based) security platform (the “
Cloud Security Platform
”), that implements, enables, manages and monitors your security incidents based on the security policies defined by you.

1.2 Service Elements and Features

Service options

TELUS Managed Cloud Security service provides solutions to help protect your company’s traffic generated either at the user level (“
Remote Users
”) or locally across each physical site (“
Remote Networks
”).

By leveraging the power of the Cloud Security Platform, security policies are centrally configured, managed, and applied equally across all users and sites.

TELUS Managed Cloud Security Services’ requirement for Remote Networks is based on the aggregated bandwidth going through your firewall at any given time estimated based on the type and number of security features enabled, packet size, number of VPNs, and speed of each site access.

TELUS Managed Cloud Security Services’ requirement for Remote Users is based on the number of remote access VPN connections required. TELUS Managed Cloud Security Service endeavours to provide consistent security for users who are connecting to their corporate network or the internet.

Service Elements and parties’ responsibilities

The chart below specifies the TELUS Managed Cloud Security Service elements and features (“
Service Elements
”) and your and our related responsibilities.

Service Element: Remote Network and Remote User instantiation and set-up

Service Element

Your responsibility

Our responsibility

Bill method

Create security zone (trusted and untrusted) on the Cloud Security Platform

X

Included in one-time charge

Configure Remote Network/Remote User

X

Included in one-time charge

Build template for Cloud Security Platform

X

Included in one-time charge

Build template stack for Cloud Security Platform

X

Included in one-time charge

Add device group to device group hierarchy for Cloud Security Platform

X

Included in one-time charge

Configure your security policy (provided by you) to allow traffic from Remote Network/Remote User to service connection to allow traffic to the internal resource

X

Included in one-time charge

Maintenance of Cloud Security Platform

X

Included in monthly fixed charge

Ensuring that Cloud Security Platform software are at version levels certified and supported by the applicable vendor and supported by us

X

Included in monthly fixed charge

Service Element: Cloud Access Security Broker (“CASB”) (if selected)*

Service Element

Your responsibility

Our responsibility

Bill method

Identification of applications to be configured inline and API security for the Cloud Security Platform

X

Included in one-time charge

Configuration of inline security policies on the Cloud Security Platform

X

Included in one-time charge

Configuration of API security policies on the Cloud Security Platform

X

Included in one-time charge

Configuration of access and required settings on the corresponding Cloud Security Platform’s applications

X

Provide CASB service reports upon request (up to 3 per month)

X

Included in monthly fixed charge

Service Element: Data Loss Prevention (“DLP”) (if selected)*

Service Element

Your responsibility

Our responsibility

Bill method

Identification of platform-native data patterns to be configured for DLP security

X

Included in one-time charge

Configuration of platform-native data loss prevention policies based on the requested data patterns

X

Included in one-time charge

Provide CASB service reports upon request (up to 3 per month)

X

Included in monthly fixed charge

Service Element: use of TELUS systems & infrastructure

Service Element

Your responsibility

Our responsibility

Bill method

Operate our trouble ticketing system to track and report on current and historical problems for TELUS Managed Cloud Security Service

X

Included in monthly fixed charge

Service Element: Cloud Security Platform management

Service Element

Your responsibility

Our responsibility

Bill method

Monitor (7 x 24) Cloud Security Platform for availability and functioning

X

Included in monthly fixed charge

Update you for any maintenance related activities on the Cloud Security Platform

X

Provide a designated contact with which we can communicate status of the TELUS Managed Cloud Security Service

X

Provide a single point of contact and create a trouble ticket and follow the ticket through resolution

X

Included in monthly fixed charge

Service Element: Configuration changes

Service Element

Your responsibility

Our responsibility

Bill method

For standard change requests as requested by your designated contact:

-Up to forty (40) changes per month during the initial ninety (90) days starting from the signature date of this agreement -Up to ten (10) changes per month for the remainder of the term of this agreement

X

X

Included in monthly fixed charge

Scheduled change management: ability to schedule change requests ahead of time to fit your change management process within the following time frames:

Mon-Fri 6am to 6pm MST

X

X

Included in monthly fixed charge

Ability to schedule change requests to fit your change management process.

X

X

Included in monthly fixed charge

Service Element: Valid vendor maintenance agreements

Service Element

Your responsibility

Our responsibility

Bill method

Have a valid maintenance agreement with the service vendor

X

Included in monthly fixed charge

Service Element: Software, managed services or configuration failures

Service Element

Your responsibility

Our responsibility

Bill method

First-level troubleshooting and problem diagnosis of your TELUS Managed Cloud Security Service that appear to be impacted by the Cloud Security Platform configuration

X

Assist with Cloud Security Platform troubleshooting and problem diagnosis with approved contact

X

Included in monthly fixed charge

Service Element: security management

Service Element

Your responsibility

Our responsibility

Bill method

Define business rules for security appliance configuration and changes

X

24x7 logging* of Cloud Security Platform listed in the Service Charges section

X

X

Included in monthly fixed charge

  • Logs are stored as per the Cloud Security Platform’s minimum data storage capacity, or, per your own storage requirements.

1.3 Your Responsibilities

Use

You consent and represent that you will use the TELUS Managed Cloud Security Service for its primary purpose and that you will not intentionally interfere with, disrupt the integrity or performance of, or attempt to gain unauthorized access to the Cloud Security Platform, nor facilitate any attack, send, upload, or storing of malicious code of any kind.

1.4 Specific Conditions

Disaster recovery

In the event of fire, water damage, theft, malicious attack, loss of environmental controls, or any other incident at your site that is not caused by normal business activities, we will assess, plan, and recover operations upon your request and approval, and will bill these services at TELUS’ standard rates, based on the time spent on such project and on a time and materials (“T&M”) basis. Enhancing or testing disaster recovery plans are available on a T&M basis.

Prevention of virus

The Managed Cloud Security Service does not include the installation, configuration or maintenance of anti-virus software. Without limiting anything else in this agreement, we make no warranties relating to, and are not responsible for, the detection or prevention of viruses or the effect of any viruses on your hardware, software, LAN or facilities, even if the introduction of the viruses is related to the provisioning of the Managed Cloud Security Service.

Infrastructure upgrades

Changes to the Managed Cloud Security Service subsequent to the initial installation required as a result of significant upgrades or changes to the VPN termination devices located at your site(s), including new or upgraded routers, or firewalls, will be billed on a T&M basis and may result in changes to the monthly fixed charge shown in the Your Services & Summary Charges section.

Relocation

The Managed Cloud Security Service can be registered to a new street address as a result of a relocation of your primary service address originally associated with these service terms. To relocate the Managed Cloud Security Service, you must provide us thirty (30) days written notice prior to any change of primary address together with the new service address. If applicable, a site VPN termination device may also be moved from one location to another. If requested, we will supervise the move to your new service address and bill you in T&M, otherwise you are responsible for the relocation. If the affected VPN termination device is not re-installed by you in an acceptable state as determined by us to offer the Managed Cloud Security Service after a relocation that was not supervised by us, you agree to pay us in T&M to re-install the affected VPN termination device in an acceptable state to resume the offering of the Service. Service Availability Target calculation will be suspended during the relocation period and will not be re-instated until we determine that we can provide the Service as outlined in this agreement to you. You will continue to be charged during the relocation period as outlined in the Your Services & Summary Charges section.

Resale

Unless expressly permitted by us, you shall not resell the Managed Cloud Security Service, or provide access to the Managed Cloud Security Service, directly or indirectly to third parties. If we permit such resale to or access by third parties, you shall be responsible for all such third party use or access and shall indemnify TELUS against all damages, costs and legal fees incurred by us from any claim arising from third party use of or access to the Managed Cloud Security Service.

Software license

The software used to deliver the Managed Cloud Security Service (whether embedded in hardware as firmware or standalone software that is provided without hardware or otherwise) and any copy or modification of it is and will remain the sole property of TELUS or its third party suppliers. The right to use any software included with the Managed Cloud Security Service is a non-exclusive, non-transferable license to use such software, and in respect of its use, you will:

  • use such software only in conjunction with the Managed Cloud Security Service and in accordance with any accompanying documentation,

  • not reproduce, reverse engineer, disassemble, decompile, modify, adapt, translate, create derivative works from, or transfer or transmit such software in any form or in any means,

  • not disclose, publish or otherwise make publicly available any benchmark, performance or comparison tests that is run on the Managed Cloud Security Service, in whole or in part,

  • comply with the terms and conditions of any license accompanying such software, which can be found at
    https://www.telus.com/en/business/support/article/oem-documents
    ,

  • cease to use and return to us, or if instructed by us, destroy or permanently delete any and all copies of such software on termination of the Managed Cloud Security Service, and

  • not copy or distribute any accompanying documentation.

The licenses used to deliver the Managed Cloud Security Service are an integral part of the Service Elements, except where you have purchased the licenses directly through TELUS resale or through other sources. If you own the licenses, then Your Services and Summary Charges table will only reflect the costs related to the management of the Managed Cloud Security Service and the required licenses will not be part of the Service Elements. You are responsible to procure any maintenance or support services to support the licenses. You are also responsible for renewal of the licenses. The use of licenses purchased separately will be according to the End-User License Agreement (“
EULA
”) imposed by the vendor.

Storage & decryption of your data

You acknowledge and agree that any data or information including your personal information or the end users’ information provided to TELUS may be shared by TELUS with TELUS’ subcontractors or third party service providers in order to provide the Managed Cloud Security Services under this agreement. You further acknowledge that such information may be processed and stored outside of Canada and may be subject to access under the laws of the foreign jurisdiction.

1.5 Service Performance

Service Availability Target

TELUS Managed Cloud Security Services come with a service availability target performance commitment described below (the “
Service Availability Target
”). Where we fail to achieve the Service Availability Target in any month we will provide you with the applicable one-time credit indicated in the table below. The payment of the credit is your sole remedy for a failure by us to meet the Service Availability Target and we will not be obligated to pay any other compensation and will have no other liability to you for any failure to meet the above and such a failure will not be considered a breach or default of this agreement by us.

Measure

Performance target

Service Availability Target

Percentage of monthly fixed charges applied as a credit

Service availability

99.99%

Less than 99.99% but equal to or greater than 99.90%

5%

Service availability

99.99%

Less than 99.90% but equal to or greater than 99.00%

15%

Service availability

99.99%

Less than 99.00% but equal to or greater than 98.00%

25%

Service availability

99.99%

Less than 98.00%

100%

The Service Availability Target is the percentage of time in a calendar month that the TELUS Managed Cloud Security Service should be available for your use on a per location basis. Service Availability Target is calculated as follows:

Service availability =

Service Availability

When we measure and calculate the result we assume each month is 30 days but we include all periods of unavailability over the calendar month except for any period of unavailability that is caused or contributed to by one of the following excusable downtime (“
Excusable Downtime
”):

  • networks or equipment of another carrier or service provider,

  • you, your network or your other services,

  • an event of force majeure as defined in the General Terms and Conditions,

  • any period of unavailability that occurs when we are performing maintenance activities during planned and unplanned windows,

  • our equipment, software, technology and/or third-party equipment, software or technology (other than third-party equipment, software or technology used to deliver the Cloud Security Platform),

  • failure of your Internet service provider, utility companies, or other vendor(s) you rely on to access the internet,

  • misconfiguration of Service features or settings wholly under your control,

  • your failure to purchase an adequate license to meet the volume or capacity at which it uses the TELUS Managed Cloud Security Service, if the service performance commitment would have been met if not for such failure,

  • high availability events and scaling events,

  • fetching of logs from logging service,

  • if using BGP (Border Gateway Protocol) with your Cloud Security Platform, the route convergence time will be excluded,

  • any reasonably unforeseeable interruption or degradation in service due to actions or inactions caused by third parties including, but not limited to, force majeure events, and

  • rightful suspension and/or cancellation by the vendor of the Cloud Security Platform of the TELUS Managed Cloud Security Services pursuant to the vendor’s EULA.

Service credits are calculated as a percentage of the monthly fixed charges attributable to the applicable Service and further pro-rated based on the portion of the Service impacted by the outage (e.g., for Managed Cloud Security for Remote Users, the outage impact is measured based on the number of users affected; for Managed Cloud Security for Remote Network, the outage impact is measured in Mbps). The credit is applied only once for the month we fail to achieve the Service Availability Target.

1.6 Changes

Change requests

In an effort to identify risk and reduce overall impact of changes to your environment, we have implemented a 3-tier support process for change requests that require testing. The request will be processed and TELUS support will determine if the change is within an acceptable level of risk. We will then contact you and negotiate timelines for testing and execution if needed.

Change management processes include the ongoing evaluation, management and tracking of the execution of requests for changes conforming to ITIL best practices.

Requesters in your authorization list provided to TELUS (“
Authorization List
”) will have access to TELUS change portal tools and will be accepted as valid change requesters. All other change requests from users not on the Authorization List will be rejected.

Request submission

Both standard and non-standard change requests can be submitted via the change request web portal. You are responsible to ensure all details in the change requests are valid and accurate for successful change implementation.

These requests will be reviewed and if a quote is required (non-standard and/or complex change), we will engage all necessary parties to review and assess the request. We will submit a quote back to you for approval as required.

In cases where a statement of work (“
SOW
”) is required, we will work with your internal teams to develop the appropriate SOW.

Standard change requests

A standard change request is implemented through a scheduled change window and consists of simple policy changes as listed in your proposal template and/or welcome guide associated with the Managed Cloud Security Service. Requests above the monthly quota indicated in the above Service Element’s table are subject to T&M charges.

Expedited change requests

An expedited change request is a standard change request with quicker turnaround time objectives. Expedited change requests initiated by you are subject to T&M charges.

Emergency change requests

An emergency change request is a standard change request that is urgent due to immediate or potential impact to Service Availability Target with quicker turnaround time objectives. Emergency change requests initiated by you are subject to T&M charges.

Change management

The following table outlines the TELUS Managed Cloud Security Service change management performance objective applicable to standard charges:

Measure

Indicator

Objective

Response and completion for standard change request

Elapsed time from receipt of your change request to initial acknowledgement of receipt by TELUS

Elapsed time between notification back by TELUS and completion (unless parties agree that the change will be made during scheduled maintenance)

15 minutes*

16 business hours

Response and completion for expedited change request

Elapsed time from receipt of your change request to initial acknowledgement of receipt by TELUS

Elapsed time from receipt of your change request to initial acknowledgement of receipt by TELUS

15 minutes*

12 business hours

Response and completion for emergency change request**

Elapsed time from the receipt of the high priority ticket tied to your emergency change request to the initial acknowledgement of receipt by TELUS

Elapsed time between notification back by TELUS and completion (unless parties agree that the change shall be made during scheduled maintenance)

15 minutes*

2 hours

* Average acknowledgement of change request notification within a calendar month does not exceed an average of 15 minutes. ** Emergency changes are implemented within 2 hours following the incident management process and following the pre-qualified assessment.

1.7 Service Cancellation Charges

TELUS cancellation right

We may cancel the TELUS Managed Cloud Security Service at any time for any reason on thirty (30) days’ prior written notice to you. Should we do so, you will not be liable for the payment of any service cancellation charges in connection with such cancellation.

Cancellation charges

When you cancel TELUS Managed Cloud Security Services, we calculate the cancellation charge using the table below. The service cancellation charge is the aggregate of the percentage of the total monthly fixed charges remaining for the service period after cancellation.

Month of the service period at which cancellation occurs

% of monthly fixed charges for the remaining service period after cancellation

0 – 24 months

100%

25 – 60 months

50%

Did this article solve your problem?

Yes
No

Related articles

This Privacy Statement describes how TELUS collects, uses, and discloses your personal information when you use the TELUS Business Connect Mobile App.

Shared hosting terms and conditions

This Privacy Statement describes how TELUS collects, uses, and discloses your personal information when you use the TELUS Secure Business Mobile App.

The fine print for pre-authorized payments

Learn about accessibility at TELUS
function assign() { [native code] }