Does your organization automatically encrypt or block outbound communications containing sensitive data based on data classification?

This control ensures that sensitive information is protected when transmitted outside the organization by either encrypting it to maintain confidentiality or blocking its transmission entirely when appropriate. The system should be able to identify sensitive content based on established data classification policies and automatically apply the appropriate protection mechanism without requiring manual intervention.

Evidence could include screenshots of DLP (Data Loss Prevention) system configurations, email gateway settings showing encryption/blocking rules, data classification policies tied to automated controls, and logs demonstrating the system in action when sensitive data is detected in outbound communications.