When creating a penetration testing report, what is the recommended remediation related to the management of encryption keys that have a set period after which they must be replaced with new keys?
Password complexity update
Certificate renewal
Key rotation
Biometric re-enrollment