How does your nonprofit keep domain access secure when leadership changes?

I help with the US Route 6 Tourist Association, and domain management is a practical issue for any volunteer-led organization.

A useful starting checklist is to register the domain under the association’s name, designate a primary administrator and a backup, document renewals, and maintain a secure recovery process.
We put together a guide:
https://usroute6happenings.com/nonprofit-domain-registration/
How does your organization handle domain access when officers or volunteers change? Have separate administrator accounts or a written handover checklist worked well for you?