CASB helps enterprises embrace cloud services while ensuring privacy, security, and compliance. It delivers cloud discovery, analysis and enforces security measures such as encryption, DLP and access control for approved corporate apps such as Office 365, Box and Salesforce, permitted (allowed for particular users or tasks), shadow (unapproved, chosen by users), and custom apps (internally-developed apps using IaaS such as AWS or Azure as the back-end