Office 365 also offers customers granular controls to further secure their environment for policy and governance reasons. Rights Management Services prevents access to files without the correct user credentials. Multi-factor authentication protects access to the service with a second factor such as a phone. S/MIME provides secured certificate-based email access. Office 365 Message Encryption allows you to send encrypted email to anyone. Data-loss prevention (DLP) capabilities help prevent sensitive data from leaking, either inside or outside the organization. To learn more about the capabilities enabled for Office 365 security, read this whitepaper.
Google offers administrators limited capabilities within Google Apps for Work for scenarios, such as policy setting for DLP and email-forward prevention for Information Rights Management, which are critical for enterprise customers. Customers who rely on third-party apps in their marketplace to fill these gaps incur additional time and cost to find and setup these solutions (potentially separate ones for Gmail, Google Drive and Google Sites). They might also face additional risks if they permit multiple parties to access some or all of their data.