The agreement should cover scope, service levels, responsibilities, escalation, security access, data protection, reporting, documentation, knowledge transfer, change control, pricing, transition and exit. The contract should be supported by an operating-level agreement that makes the day-to-day relationship workable.