Encrypt sensitive files

Whole-disk encryption

Physically secure devices & paper documents

Restrict unauthorized access.

Manage data utilization

Using sensitive data only as approved and as necessary.

Manage devices

Anti-virus software
Patching
Whitelisting applications
Device Passcodes
Suspending inactive sessions
Enabling firewalls

Manage Data Access

Using Microsoft cloud servers and storage
Legal, regulatory, privacy, restrictions
Data acquisition sources
USB and other data ports disabled