To encrypt the database in the organization, I think it is better to use symmetric key encryption.
According to what I've researched from NIST paper.
Cryptoperiod: The originator-usage period recommended for the encryption of large volumes of information over a short period of time (e.g., for link encryption) is on the order of a day or a week. An encryption key used to encrypt smaller volumes of information might have an originator-usage period of up to two years. A maximum recipient-usage period of three years beyond the end of the originator-usage period is recommended.
but I couldn't find information on how to manage key in such a way that once the originator-usage period has expired, the database can still get decrypted as the recipient-usage period is longer. I don't really get the concept here since it is "symmetric" encryption key, how is it possible make it become decryptable but not encryptable. Could anyone explain or provide me with a resource of information? Thank you in advance.