What is the safest way for consultants to access private servers and databases?

Let’s say you are working with a remote consulting firm on a project that requires ePHI… the sensitive data is stored on resources isolated to your private network.

What is the safest way and why to allow consultants access private resources?

1. VPN using their own workstation
2. Virtual desktop environment
3. Some other mechanism, please explain

access consultants consulting cybersecurity data databases desktop environment network own private private network project resources sensitive data servers virtual vpn what is working workstation