300-220 CBRTHD: Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity

The security team at a shoe company is told by the CTO that an overseas office uses a third-party online file-transfer service. After additional investigation, the team determines that the service is shadow IT, but not malicious. The facility management team says this is the only locally government-approved method for transferring applicable tax files. The team wants to reduce possible data leakage and, if a breach occurs, limit an adversary’s ability to exfiltrate data through online services. The CTO advises the team to proceed carefully to prevent business disruption.

Which action should be taken?