Do you require service providers who operate systems on your behalf to implement protections against environmental threats and maintain adequate operating infrastructure?

This question assesses whether your organization enforces requirements for third-party service providers to protect systems from environmental hazards (such as fire, flooding, power outages) and maintain proper infrastructure (like cooling, backup power, physical security). These requirements are essential when outsourcing critical systems or data processing to ensure business continuity and data protection regardless of where systems are physically located. Evidence could include contractual language with service providers that specifically addresses environmental protections and infrastructure requirements, service level agreements (SLAs) that define minimum standards, or documentation from provider site assessments that verify these controls are in place.