Your organization is moving a workflow that processes sensitive data, including personally identifiable information (PII), from on-premises infrastructure to Google Cloud. This workflow involves collecting, storing, and analyzing customer data. You need to design security measures to prevent the risk of data exfiltration in the cloud environment. What should you do?