Mechanisms exist to contractually-require external service providers to have contingency plans that meet organizational contingency requirements.