Protect users, both inside and outside the enterprise

From chq_mkt_delegated