Step 1 - Define your VPC Service Controls, and implement in dry run mode

Step 2 - Monitor GCP logs to check for potential violations.

Step 3 - Check logs across projects. Create a log export sync to Bigquery at the top organization level.

Note: Will GCP offer a dry run for Organizational Policies?