FICTIONAL EXAMPLE. The organisation, documents, figures and events are invented.

Check of a supplier email with a pasted customer extract

Organisation settings (fictional)

The brief (fictional)

A staff member pastes an email to a printing supplier. It carries a table of fictional customers with masked account endings, and mentions quarterly results not yet announced. The spreadsheet attachment is not pasted.

Prepared with corp-sensitive-check v1.0.0. A person decides. This is not a clearance.

Result

Hold.

Findings

WhereTypeWhy it matters hereSuggested action
Table in paragraph 3, 12 rowsPersonal information: names and addressesA printing supplier needs addresses only if a contract and instructions allow itCheck the contract; send through the approved transfer route, not email
Column 4 of the same tableAccount numbers, ending 42 and othersThe print job does not appear to need themRemove the column
Paragraph 5Possibly market-sensitive: refers to quarterly results not yet announcedThe recipient is outside the bankRemove it. Ask the Information Security Desk if unsure.
Top of emailMarked Internal, content looks RestrictedMarking may not fitAsk your line manager to check the marking

What I could not check

Before you send

Open the attachment, unhide all sheets, remove comments and check the file properties.

Who decides

Line manager, then Information Security Desk.