The first can be objectively and quickly ruled as violating company policy. The second has to go through a process -- did Jensen knowingly violate national security policy, and if so how significant was it?