A financial services firm is designing a new system that must meet strict regulatory uptime requirements. The architect proposes a single-cloud provider for simplicity, but the risk team warns of concentration risk. What is the BEST approach?
A. Accept single-cloud risk and negotiate enhanced SLAs with the provider
B. Require a multi-cloud architecture to eliminate provider dependency
C. Evaluate concentration risk against complexity costs and regulatory obligations
D. Implement on-premises failover to maintain independence from cloud providers