Most regulatory guidance and sound business practices dictate that you should conduct business continuity and disaster recovery due diligence and planning on your critical and high-risk vendors.
Business impacting events will happen and no organization is immune. These can be unexpected natural or man-made disasters.
When, not if!
You need to ensure that your key operations, products and services will continue to be delivered either in full or at a predetermined, and accepted, level of availability.