The meaning of data in motion or transit is that information is actively moving from one location to another inside your environment or outside through the internet. Typically, the process starts with the creation of a document, presentation, or spreadsheet, or the export of information from a source, such as the HR, CRM, or another system. The best option is to include the classification and protection process directly in these processes. Otherwise, you need to be able to detect and identify sensitive data from scratch on client computers and servers. Another important thing is that you know where your sensitive, protected, or not-protected information is exchanged and stored. Let's say you need a solution that's able to monitor the sensitive data on client computers, on-premises, and in the cloud. Microsoft follows this strategy and provides the following technologies to fulfill these requirements to actively monitor sensitive data in motion:

• Azure Information Protection: Classification and protection monitoring including document tracking.
• Windows Defender ATP: Monitoring classification and protection activities on client computers.
• Cloud App Security: Active monitoring of your enabled cloud ecosystem, including data-leakage prevention, classification, and protection capabilities.
• Office 365: Monitoring, data-leakage prevention, classification, and protection capabilities inside the Office 365 services.

Let's dive a bit deeper into the different functionalities of these technologies.