(9)Institutions and resolution authorities should also identify the critical services in the recovery and resolution plans. To the extent that critical services are outsourced to third parties, the resolution authority should be able to limit its assessment to that which is necessary to verify whether the institution has an appropriate business continuity plan in place.