An advice from a mentor of mine when I first started my journey in reputation management, plausible deniability has saved me and my clients on numerous occasions.
Encryption won't save you from any of that.
>plausible deniability has saved me and my clients on numerous occasions.
right...OK maybe it will if that's how it is employed. Quite risky though. Encrypting stuff & "forgetting" the password versus say shredding evidence isn't that far apart.
Disagree. Shredding evidence is an active action that can be used to establish guilt. Forgetting a password requires none of that.
I am just a small engineer but this strategy seems to have worked in my small area. We are finally following industry standards, pentesting gets done (some people still resist though. They think it's better not to know about problems) and in general things don't get ignored anymore.
(my guess is that those may have been written at a point in time during which it did make sense to prevent publication/knowledge of mistakes like that - I'm wondering whether that remains a good policy nowadays, when risk-reduction can often benefit from information-sharing, even around failures and errors)