Key rotation

Rotation has to work before you need it, because the day you need it is the day something has gone wrong.

How long a key should be used depends on how it is used and how exposed it is, and the schedule is worth less than the ability to do it at all. Organisations that have never rotated a key discover, during an incident, that nobody knows where its copies are.