The number of copies of sensitive information is limited to
reduce the opportunity for its leakage. Examples include restrictions on
handling of sensitive information in most government and industry
Complexity: There is a tradeoff between the advantage of retaining fewer
copies to prevent leakage and having enough copies to assure availability.