Genesys Cloud provides functionality to modify key change schedules for managing Key Encryption Keys (KEKs) used to encrypt interaction recordings. Users with appropriate permissions (Recording > Encryption key – Edit and View) can access the encryption key configuration through Menu > Conversation Intelligence > Recording and Policies > Encryption Keys. The system supports periodic key rotation at configurable intervals—daily, weekly, monthly, yearly, or never—by selecting AWS KMS Symmetric from the Key Configuration Type dropdown and choosing the desired rotation frequency from the Periodic Key Change list. When keys are rotated, Genesys Cloud generates new key pairs to encrypt subsequent interactions while retaining previous keys for decrypting already-encrypted data, eliminating the need to re-encrypt historical recordings. The platform supports key rotation for Genesys Cloud Managed keys and AWS KMS Symmetric keys; users implementing Local Key Manager must manage key rotation independently. An immediate key change option is available through the "Change key now" feature. Best practice recommends implementing scheduled key rotation with short intervals to maintain security compliance.