What does an organisation mean by the term 'confidential'? How does it actually apply in practice - does it actually fit with the day to day activities of the business? Do people use the term in anger? And, most of all, is it enforceable?
Some organisations can tend to bandy around such words without really having a clear idea what they stand for or, indeed, what we should do about them. While very few companies are what we might term 'best in class' for in our experience, implementing best practice around document markings does not have to be onerous.
From working with clients we know that businesses working in more regulated sectors tend to over-classify information, preferring to protect more than is necessary rather than being caught out. While an "If in doubt, keep it in" approach does make corporate documents more secure, it can add unnecessary, potentially avoidable cost.