A cloud service provider offers a financial institution a contract that includes a liability clause stating that in the event of a data breach caused by the provider’s negligence, they will compensate the institution for damages. Which risk treatment strategy is the institution using by agreeing to this clause?