CAIQ v4 Control DSP-12 Extractive Review Standard

How to answer 'What Data Loss Prevention (DLP) controls are in place?' on a CAIQ

Reviewer Guidance & Pitfalls

Describe DLP controls on endpoints (blocking USB exfiltration, browser download limits) and automated secret/PII scanning in source code repositories.

Example Answer Passing Enterprise Audit

Compliant Response Template
Workforce endpoints enforce MDM policies blocking unauthorized external storage devices; git repositories enforce automated pre-commit scanning to prevent confidential data or secret leakage (SOC 2, CC6.1).

Filling out a CAIQ or SIG Lite right now?

QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.

Zero spam. 100% confidential. No credit card required.