Requirement
"Data leakage prevention measures shall be applied to systems, networks and any other devices that process, store or transmit sensitive information."[1]
Explanation
Data leak prevention systems identify sensitive information in documents and help identify/prevent their unauthorized transfer. Microsoft 365 has built-in data leak prevention capabilities that can be configured to protect documents stored in SharePoint and OneDrive. Data leak prevention systems can also be deployed at the network level.