If RiskVision is monitoring already-decrypted transactions, use the Transaction Viewer on the Incidents page in the RiskVision Local Manager to find out if Data Analysis has found data loss or data theft incidents associated with cloud app use.

By default, when you select the Cloud App option from the View drop-down list, the table includes columns for cloud app name and risk level, and for data analysis content, violation triggers, and content classifiers (or rules).

To look for correlations, try grouping by Cloud App and Data Content.

You can also try grouping data by Plugins to find incidents with results returned by both Cloud Apps and Data Analysis.