-
Normally this would be a DAMAGE assessment, which they do after a leak to the public or theft by a spy, when it's clear the classified info was compromised. This is a RISK assessment bc it's unknown if any bad actor got to the docs or they just sat there, insecure but unmolested. @kyledcheney/1563587380795228161