(10)The determination of a service as critical should enable institutions to ensure the continued availability of those services by providing them through entities or units that are resilient in a failure, or establishing appropriate arrangements where they are supplied by an external provider.