Monitoring users going into risky countries

Perhaps this is meant better for a post/another subreddit but I'd figured you'd guys may still be the best to help answer this!
What processes do you guys use to monitor someone going to a risky country?


We currently have setup conditional access to require MAM and domain joined devices as well as manually monitoring to make sure USB access is more restricted via requiring encryption to write to it.
Anything else you guys recommend we should do?


We use …

access conditional access countries cybersecurity devices domain joined mam may monitor monitoring processes