Implement monitoring tools and procedures to continuously track compliance with data classification policies. This includes regular audits of data access, handling, and storage practices.

Use the insights gained from monitoring and auditing to identify areas for improvement and adjust policies as necessary to address new threats or changes in the regulatory landscape.

If you have Microsoft 365 with the proper license, you can activate Microsoft Purview. Microsoft Purview will allow you to trigger alerts if confidential information is manipulated unencrypted. Data Security Posture Management (DSPM) tools can also scan your storage repositories in the cloud and report if sensitive PII data is unencrypted or unintentionally exposed to the internet. CloudWize.io provides this feature. Its better to scan your cloud to understand the misconfigurations and fix these issues versus a hacker finding them.