Which CPS-compliant practice should be followed when a third-party field has no matching ECS field?

When a third-party field does not map to ECS, CPS guidance is to preserve it using the Vendor. prefix. This keeps the field searchable and retains source-specific context while maintaining normalization standards. Removing the field or forcing it into an unrelated ECS field would reduce data quality and clarity.