Has your organization implemented controls to prevent and detect data leaks across systems, networks, and endpoints?

Data leak prevention (DLP) controls are essential for protecting sensitive information from unauthorized access or exfiltration. These controls typically include monitoring data in motion (network traffic), data at rest (stored data), and data in use (endpoint activities), with capabilities to block suspicious transfers or alert security teams.

Evidence could include documentation of implemented DLP solutions, screenshots of DLP policy configurations, data classification schemes, logs showing blocked data exfiltration attempts, or reports from DLP monitoring systems that demonstrate active protection against data leaks.