Operational best practices
Vendor credential lifecycle
Operational best practices for managing vendor credentials over time.
Own the credential
Every vendor credential should have a named owner role and a vault.
Rotate on a cadence
Rotate on a cadence that matches the sensitivity of the credential and the vendor's posture.