The organization should ensure that contracts with internet service providers include specific provisions for availability and security. The agreement must cover:

1. Incident response: specify the provider's responsibilities for responding to cybersecurity incidents, detailing the required response times during both normal business hours and after business hours.
2. Service availability: stipulate the required level of uninterrupted internet service provision, specifying the minimum guaranteed uptime both during and outside of normal business hours.
3. Disruption logging: include a clause mandating the internet service provider to log all service disruptions, specifying the duration and frequency of this logging requirement.
4. Network protection: require the implementation of protective measures against network and information system disruptions, such as Denial of Service (DoS) attacks.