Our procedures deal mainly with the physical security of our document. We have a process by which draft reports are numbered. We have a register of all the copies sent to the departments. Once an audit is complete, we ask that all copies be returned to us or that departments, or agencies, give us assurances that the copies have been destroyed. There is also a provision that certain protected documents should not be photocopied.
I want committee members to understand that this is really about the physical security of documents. It is difficult to know whether the journalists really had a copy of the document. I am inclined to think rather that someone had information and shared it with a journalist.