A contract for a critical service lacks exit provisions. Which program risk should be addressed?

1. The ability to transition service and recover or dispose of data securely
2. Whether the service's monthly uptime report contains enough charts
3. Only the provider's advertising language
4. Whether the supplier can offer a longer renewal term at a discount