Requirement 12.3.9

Activation of remote-access technologies for vendors only when needed by vendors, with immediate deactivation after use