A pharmaceutical company recently classified its drug formulation research as its most sensitive intellectual property. Investigators discovered that a departing researcher emailed several formulation spreadsheets to a personal cloud storage account over the previous month, and the activity went completely unnoticed. Management wants a technical control that will detect and block sensitive data leaving the organization through channels such as email, web uploads, and removable media in the future. Which control best meets this requirement?