Rotate keys
Security officer, CISO and vetting officer: Rotate keys. Starts when: Scheduled or incident. Steps: Open Vault; Choose key; Rotate; Re-encrypt; Record. Done when: The key shows the new version and the rotation receipt. Rules that apply: NCSC key management guidance.