Which of the following should be put in place when negotiating with a new vendor about the timeliness of the response to a significant outage or incident?