A network security practice that monitors and controls data leaving an organization's network to prevent data exfiltration, malware communication, and unauthorized information transfer.