Secure waste is the highest risk routine task
Confidential waste bins and shredding consoles look like waste containers and are frequently treated as such. Emptying one into a general stream, or consolidating its contents at a bin room, defeats the entire arrangement in a single act performed without any intent. The plan should state plainly that these containers are not handled, and who does service them under the organisation's own arrangements.
Loose paper is the related risk. A document on a floor, in a tray or beside a printer is not waste, and collecting it is a reasonable-looking act with a poor outcome. The rule is that paper is left where it is and reported if it appears out of place. Stating it removes an ambiguity that otherwise depends on a cleaner's judgement about the value of a page. It is also one of the few rules that a cleaner can apply without needing to understand anything about the organisation's work.
