Which of the following should be included as part of a disaster recovery plan for companies that use cloud-based services?