Lock down the registrar account
Use a unique password, enable multi-factor authentication when available, review recovery methods, and remove access that no longer belongs to the organization.
Review renewal and transfer settings
Confirm the expiry date, renewal behavior, payment method, and any available transfer-lock or account-lock protections. Store recovery information somewhere the business can access even if one employee leaves.
Document DNS and ownership
Record the registrar, nameservers, DNS provider, renewal date, and responsible owner inside the company. That prevents critical infrastructure knowledge from living only in one inbox.