In a way, I am on the opposite side of this question. I work in information security profession as an IT auditor. I was doing peer review of a vulnerabilities report / application risk assessment done by a junior member of the team today and he had many questions of "why" such as
- Why I chose the message recipients as I did
- Why I adjusted wording, style, and content the way I did
The reason for what I did is partly due to ensuring technical accuracy, but also partially due to past experience with management, management style, and workplace culture. Getting an accurate read on management style, company culture, and a likely management response (given security is not always popular) is challenging and can often only be done through several years of experience. I do not want to brush off his questions as I had these same questions in the past when I was a junior. I also do not want to appear rude / arrogant by suggesting I know better.
How do I explain my thought process about the part in the first bold statement above to such a team member in the most professional way possible?