Vendor remote access is an electronic connection that lets a third party reach an organization’s systems to provide support, maintenance, or other authorized services. It may use tools such as a remote desktop gateway, virtual private network, or managed access platform.
Because this connection can provide a path into sensitive networks, it should be limited to approved users, systems, and times, and monitored for activity. Defenders may use access records, session logs, and alerts to identify when a vendor connects, investigate suspicious communications, and disable access when necessary. In regulated environments, organizations may also need to demonstrate that these controls work in practice.