Which of the following should the security team implement FIRST?

A company recently deployed an agent-based DLP solution to all laptop in the environment.

The DLP solution is configured to restrict the following:

• USB ports

• FTP connections

• Access to cloud-based storage sites

• Outgoing email attachments

• Saving data on the local C: drive

Despite these restrictions, highly confidential data was from a secure fileshare in the research department.

Which of the following should the security team implement FIRST?
A . Application whitelisting for all company-owned devices
B . A secure VDI environment for research department employees
C . NIDS/NIPS on the network segment used by the research department
D . Bluetooth restriction on all laptops