Amy is an Org Owner on an Enterprise Grid plan.

The proper course of action involves:

Deleting the file through an integrated Data Loss Prevention (DLP) solution.

Reviewing access through the Audit Logs API.

Slack documentation confirms:

"A DLP integration allows detection and remediation (e.g., deletion) of sensitive files or messages. The Audit Logs API provides detailed logs of user activity, including file downloads."

Mobile Device Management (MDM) focuses on device security, not file tracking, and EKM controls encryption but doesn't show file download actions.

(Reference: Slack Administration Study Guide - Security and Compliance - Data Loss Prevention and Audit Logs)

===========

—