Which practice supports encryption key rotation?

• A. Rotate keys only after major system upgrade.
• B. Regularly rotate cryptographic keys and manage their lifecycle, with access controls.
• C. Rotate keys only after a data breach.
• D. Share keys across multiple services.

Answer: (B)