Operational best practices

Vendor credential lifecycle

Operational best practices for managing vendor credentials over time.

Own the credential

Every vendor credential should have a named owner role and a vault.

Rotate on a cadence

Rotate on a cadence that matches the sensitivity of the credential and the vendor's posture.