Control emergency bulk exports by tenant
Emergency controls often need to be strict enough to contain harm and precise enough to preserve legitimate work.
A broad stop can reduce exposure while also interrupting obligations teams cannot defer.
“I need a hard stop for a bad export, but payroll and legal still have to get their files out.”
Dongwoo Xu · Director of Knowledge Governance
Oversees confidential policy, audit, and operating records in an enterprise workspace affected by the compromise.
What pulls against what
- hard containment vs. legitimate exports
- complete coverage vs. heterogeneous systems
- renewal assurance vs. workflow continuity
- automated findings vs. reviewed evidence
What is at stake
The containment commitment must stand up to adversarial verification. A weak control leaves data exposed; an indiscriminate one can halt legitimate enterprise operations
Why Notion
Where shared workspaces hold business records, containment decisions often carry both trust and continuity consequences.
Written for
This is the setup. The work is inside.
Running it puts you in the room: the full situation and its constraints, stakeholders who push back in their own words, and the decisions that are yours to make. What you produce becomes a Day One Plan — work you can show someone instead of describing.