handling incidents and contingencies associated with supplier access including responsibilities of both the organization and suppliers
i) resilience and, if necessary, recovery and contingency arrangements to ensure the availability of the information or information processing provided by either party;