
you probably should start with O365 Information protection policies e.g. Enable sensitivity labels for Office files in SharePoint and OneDrive. Shortly you may configure and apply so called sensitivity labels to files which add additional protection level. Here are few related articles about them: