A UK-based retail brokerage firm has recently experienced rapid growth through a series of acquisitions and plans to improve its operational resilience in order to comply with new requirements issued by national regulators. The CRO asks an operational risk manager to assess best practices in this area and to suggest potential actions that the firm should take to meet this objective. Which of the following actions would be most appropriate for the manager to recommend in order to comply with the regulatory guidelines concerning operational resilience for important business services?