[Confidentiality] How do you decide what must be shared versus what should be limited?

I usually decide that by looking at three things: who has a real role in acting on the issue, what level of detail they actually need to do that role, and what information would create unnecessary spread if it moved any further. That keeps the decision tied to process instead of curiosity or hierarchy alone.

I...