How often are keys and secrets rotated?

What encryption standards are in the plan?

TLS 1.2 minimum in transit with 1.3 preferred, HSTS, AES-256 at rest, column-level encryption for sensitive and restricted data, and dedicated secret stores outside source control.