Data protection

- Data classification and labeling - Encryption strategy (at rest, in transit, in use) - Key management architecture - Data loss prevention (DLP) and egress controls - Privacy and regulatory compliance