I dunno. Sometimes it’s just Hanlon’s Razor. In some industries (e.g. defense contracting), getting a concrete answer for where you can and can’t store certain

I dunno. Sometimes it’s just Hanlon’s Razor. In some industries (e.g. defense contracting), getting a concrete answer for where you can and can’t store certain information can be a nightmare. And often times there isn’t even a definitive answer. So from a risk perspective, it’s easier to have a policy of minimizing the things you write down in emails and documents. You obviously need to write some things down and need a policy for those things, but if you’re just conveying a few paragraphs of information, a brief face-to-face conversation is much lower risk than writing the same notes down in SharePoint somewhere and hoping that you don’t screw up the security markings. I guess I’ve never seen this as an official directive from management, but it’s been the reality at a few places where I’ve worked and it was never because anything shady was going on.