How to answer 'What Data Loss Prevention (DLP) controls are in place?' on a CAIQ
I. Reviewer Guidance & Pitfalls
Describe DLP controls on endpoints (blocking USB exfiltration, browser download limits) and automated secret/PII scanning in source code repositories.
II. Example Answer Passing Enterprise Audit
Compliant Response
Sealed · DSP-12
Workforce endpoints enforce MDM policies blocking unauthorized external storage devices; git repositories enforce automated pre-commit scanning to prevent confidential data or secret leakage (SOC 2, CC6.1).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire drafts answers with citations pulled directly from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
No spam · No credit card · Confidential by default