# SEC08-BP01: Implement secure key management

## Description

KMS, key rotation.

## Implementation Guidance

- Centralized key management
- HSM-backed keys
- Automatic key rotation
- Key access logging
- Separate keys per workload

## Risk Level

Critical - Poor key management defeats encryption.
