An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities. Which of the following IT strategic actions should be triggered by this decision?

A. Update and communicate data storage and transmission policies.
B. Develop a data protection awareness education training program.
C. Monitor outgoing email traffic for malware.
D. Implement a data classification and storage management tool.