@janshalomThe policy is disabled by default as it has dependency on enabling Cloud App Security file monitoring (Settings > Files > Enable file monitoring). By default, this setting is turned off in MCAS and hence Microsoft has put this policy as disabled by default.