A Cloud Access Security Broker (CASB) acts as an intermediary between cloud providers, cloud-based applications, and cloud consumers to enforce an organization’s security policies and usage. A CASB protects the movement of data by limiting access and sharing privileges, while using encryption to secure data contents.