Mechanisms exist to prohibit the transmission of unprotected sensitive/regulated data by end-user messaging technologies.
Does the organization prohibit the transmission of unprotected sensitive/regulated data by end-user messaging technologies?