After an incident involving a US government security information-sharing platform, a senator called for a Justice Department investigation, warning that even unclassified data from the platform carries national security weight.
The argument deserves attention because it runs against common intuition. Classification is assigned document by document, but the value of a collection can far exceed the sum of its parts: an operational schedule, a contact list and a routine procedure, individually mundane, together describe how an operation works.
The case gained additional weight from context: the platform supported security operations for the World Cup hosted in the United States, an event with a public schedule and known venues, where operational information has immediate value.
The same principle applies to any organisation. System inventories typically classify as low-sensitivity exactly the material describing how work gets done, and that is what interests anyone planning an attack.
The practical recommendation is tedious and effective: assess sensitivity by the collection and by use, not only by each document's label.