Rotate credentials on a calendar, not only after incidents. Quick checklist that saved us time. Start with a pilot and a single success metric.