I just can't take this shit any more.
When I was a Safety, Environmental, and Security Manager at a petrochemical plant, we shored up our corporate document security protocols, basically dictating to all employees that document classification, and levels of control been practiced. Levels of control were defined as barriers to access to the document These were defined as locked doors, gates, locked cabinets, PC password accessing, etc.
Document classification included these levels.... personal and confidential, confidential, business propiertary, general, and none needed,. This level of classification dictated what level of controls were needed to be present, and consistently practiced.
When I did my first infomal audit 3 months after implementation, site was 95% out of compliance.
My point?
Shit like document management is the ultimate "gotcha" criteria when you are on a witch hunt, with guaranteed success for conviction. And our DOJ/FBI Gestapo understands that, and is working that tactic like gangbusters.