The IT department of an organization is planning to migrate the company's email and document management services to a third party cloud based service provider's SaaS solution. The head of IT audit expressed concern about the availability and auditability of data and related application services, as the cloud service provider's infrastructure and applications are not covered by the organization's own contingency plan. i. What measures may have to be adopted to address this concern? ii. What other security risks ought to be considered, and how can they be addressed so that the systems can be migrated without compromising the organization's overall security plan?