“First of all, get a list. Understand how many secrets you have, where are they, then enrich them, classify them, understand their blast radius, and then monitor them for any anomaly.”

Transcript evidence from Itzik Alvas -- Secrets Security and Management.