# SEC02-BP05: Audit and rotate credentials periodically

## Description

Regular rotation và audit.

## Implementation Guidance

- Automated credential rotation
- Credential usage auditing
- Unused credential detection
- Rotation policies enforced
- Alert on credential misuse

## Risk Level

High - Stale credentials are exploitation targets.
