• Secrets Rotation And Validation: Review and update policies for regular rotation of secrets. This includes API keys, access tokens and credentials to access compute resources or data storage.