• A data loss prevention (DLP) capability identifies and helps prevent unauthorized handling of sensitive content, with classification and auto-labeling continuing to roll out.
• Collaboration and file-sharing permissions are managed toward least privilege with external-sharing controls.
• Email is hardened against spoofing and impersonation with authentication controls (DMARC, DKIM, SPF) and automated quarantine.

Framework Alignment: NIST CSF PR.DS; CIS Control 3, 9; GDPR Art. 32; ISO 27001:2022 A.8.12