Does your organization have procedures to monitor and log all maintenance and administrative activities performed by external providers on your systems, both remotely and onsite?

External providers often require privileged access to perform maintenance or administrative tasks on your systems, creating potential security risks if these activities are not properly monitored. Monitoring should include tracking when external providers connect to systems, what actions they perform, and ensuring these activities align with approved change requests or service agreements. Evidence could include logs of external provider access (such as VPN connection logs, admin session recordings), documented procedures for monitoring third-party activities, screenshots of monitoring dashboards, or audit reports showing review of external provider activities.