“It is vital that businesses and CISOs have the ability to enforce compliance policies and reasonably control access to documents and data.”