Remote vendor access

Equipment suppliers frequently require remote access for maintenance, and that access commonly bypasses the site's own controls.

It arrives as a condition of the support contract, is set up by the vendor, and may use their tooling, their credentials and their schedule. The site often cannot see when it is used. Bringing it inside a brokered, logged, time-bound path is one of the highest-value changes available on most plants.