Blog

Key rotation without weekend chaos

Module 4 of Vault Discipline Fundamentals treats rotation as a calendar problem first and a cryptography problem second. Here is the cadence we recommend for small teams.

Pick a quiet weekday owner

Assign a named owner in the Private Key Handling Tracker for each due date. Weekends become the exception path, not the default, so fatigue does not decide who shows up.

Split rehearsal from live rotation

Run a tabletop the week before any live change. Log the rehearsal as its own event type so audits can see practice distinct from production moves.

Time-box the window

Ninety-minute windows keep scope honest. If the checklist spills over, capture the unfinished steps as open tracker rows instead of improvising past dinner.

Publish a “who to call” strip

Witness phone numbers belong beside the rotation row — not in someone’s head. Korea-based cohorts often keep a KST primary and a secondary abroad.

Explore the full module path in Vault Discipline Fundamentals or skim the tracker overview.

Not Financial Advice — disclaimer.