SC-401 decision sheets

• Adaptive Protection: making a DLP policy risk-aware
• Audit log: retention durations, roles, and search limits
• Retention label vs retention policy