I'm not convinced that control-based is the best solution for data leakage. That's an interesting approach to access control. Have you considered cloud-native control? Has anyone worked through...

The IT admin is responsible for ensuring defense mechanisms meets meets baseline as defined in our security policy. To maintain SOC 2 compliance, we must escalate within few months.