15. The memory device of claim 11 wherein said detecting further includes monitoring network packets transmitted internally within an organization network.
11. A memory device having instructions stored thereon that, in response to execution by a processing device, cause the processing device to perform operations comprising: embedding a control mark within an electronic document created by a document word processor, wherein the control mark remains embedded in the electronic document after changing a body of the electronic document with the document word processor; wherein the control mark cannot be changed by or removed with the document word processor; and wherein the control mark includes an encrypted check sum configured to self-authenticate or self-validate the electronic document; and detecting transmitted network packets containing the electronic document, based on the control mark; making a determination that the electronic document contained in at least one of the transmitted packets has been changed; and blocking access to the electronic document contained in the at least one of the transmitted packets in response to the determination.