Implement proper cryptographic key management and rotation.

• Use Cloud Key Management Services (AWS KMS, Azure Key Vault, Google Cloud KMS)
• Prefer Customer Managed Keys (CMKs) for critical data to control access policies and rotation schedules
• Enable automatic annual key rotation for symmetric keys