An organization is finalizing a multi-year contract to outsource its data center operations to a third-party provider. During the review, the IS auditor notes that the contract addresses SLAs, pricing, and the right to audit, but contains no provisions describing how services and data would be returned to the organization if the relationship ends. Which of the following should the auditor recommend be added to BEST protect the organization's long-term interests?