Validation procedures for 3rd party security....?

Hello,

I have a client who has requested we create what they termed a "procedure to validate compliance of 3rd party equipment". Essentially they would like me to create a procedure reminding them that all 3rd party equipment should be checked for things like SQL Blank SA Accounts, Default Oracle accounts/passwords, Blank local admin passwords, file sharing, drive privleges, etc...

Instead of re-creating the wheel, I was wondering if anyone had a resource available for such a task?

Thanks in advance,

Mick