You mentioned in this blog that if you have good access control to safeguard document with sensitive information then why do you need encryption, my question is why do we need document encryption which can be applied thru sensitivity label if we have good access control for that file?

Also does Microsoft provides any tool to find leas privilege’s access for any sensitive data discovered or if sensitive data is shared with everyone in the org?