A contract associated with a cloud service provider MUST include:

A. a business recovery plan
B. ownership of responsibilities
C. provision for source code escrow
D. the provider’s financial statements