Vendor Access vs Attack Surface
Enforce time-limited, least-privilege vendor sessions with MFA and full audit logging to contain third-party attack surface.
CyberTRIZ analysis · Regulatory contradiction R123 · one of 8,235 worked contradictions published by CyberTRIZ.AI
Regulations
Contradiction
Resolution
Grant temporary, monitored, and least-privilege access while enforcing MFA and maintaining complete activity logs.
Evidence
Vendor Access Register
MFA Records
Access Logs
Kpis
Vendor access reviews
Unauthorized vendor access attempts