Your organization handles sensitive customer data, which is stored in Google Cloud Storage buckets. You need to secure this data while meeting the following requirements: Different teams need varying levels of access (some read-only, others read-write). Data must be encrypted both in transit and at rest. File changes and access must be tracked for compliance. The organization must retain control over the encryption keys used. What should you do?