Assume the following scenario:

• A setup option of outgoing messages  in a sales department, implying that the recipient list is not visible by the customers.
• Eventually, a member of the sales department changes this option, because for a particular message, intended for internal distribution, every recipient had to know about the other recipients.
• When finished with the message distribution, the user was not aware of the temporary change, and forgot to reset the setup option.

Then, in a subsequent message to customers, the list of recipients is unintentionally exposed to all the customers.

To make sure that users notice the unusual situation, the change must be exceptionally salient, such as asking the user for confirmation before sending the message.

Related topic

Updated on 13 Jul 2016.