Discretion starts before the first document is shared. Decide who may receive information, understand who is requesting it and disclose detail proportionate to the stage of the discussion.
Not every initial question requires identifiable customer, employee or commercially sensitive information. Organise controlled access and a consistent process for responding. Think about when and how to communicate with the team, without promising arrangements that have not been agreed. Confidentiality protects the process; it should not become a reason to conceal material facts from a properly authorised assessment.