Which control could help detect insider abuse of an organization's intellectual property?

Encryption in transit, when paired with Data Loss Prevention solutions that perform SSL/TLS inspection, enables real-time monitoring of outbound data flows for sensitive content. This acts as a detective control by triggering alerts when confidential intellectual property is transmitted to unauthorized external destinations, directly identifying insider exfiltration attempts.

Digital signatures verify integrity and non-repudiation of documents but do not actively monitor or alert on unauthorized transmission of intellectual property.

Whole disk encryption protects data at rest from physical theft but provides no visibility into what an authenticated insider copies or transmits over the network.

Strong passwords are a preventive authentication control that limits initial access but cannot detect or alert on misuse after an insider has already authenticated.