Encrypt sensitive files
Whole-disk encryption
Physically secure devices & paper documents
Restrict unauthorized access.
Manage data utilization
Using sensitive data only as approved and as necessary.
Manage devices
Anti-virus software
Patching
Whitelisting applications
Device Passcodes
Suspending inactive sessions
Enabling firewalls
Manage Data Access
Using Microsoft cloud servers and storage
Legal, regulatory, privacy, restrictions
Data acquisition sources
USB and other data ports disabled