...
If the vendor will be doing work that requires privileged account they will be required to use a vendor administrative account that will using the established Privileged Access Standard. The account may only be used only for the purpose it was intended created for.
(Should we put specific password completely requirements on these accounts?)
...