No big deal, don't overreact

First of all, CFO should not make too much big of deal as he or she made the mistakes to rush you to work on whatever project. And he or she knows that you are gonna look for the SVP for more info., so the copied email to the SVP is fine.

The email as you mentioned is the work-in-process, it is not the final or corporate policy type of end document, so the CFO and the SVP, assuming they have the basic professionalism, they should not disclose or lease any of the confidential information. In this case, you need watch what SVP is reacting to this matter, he or she should be very cautious to talk to anyone about this payroll information since they are sensitive. He is the victim in this case.

Your augment is very simple, based on what you describe, CFO asked you to work on something, even very confidential, and CFO directed you to talk to SVP, and you did follow the instruction and worst of worst, you can say you are gonna sit down with SVP Monday to explain the email request, or there are something you will consult him.

If there is anyone who breaches the confidentiality rule, it is the CFO, you have the trust to CFO and the SVP, so you sent the trustworthy email to them, so they should have the professional responsibility to keep that trust, not vice versa.

I cannot believe the CFO talked to Controller about this, and made big deal about this, and sent email to lots of people about the company policy...... This is propelled issue to a more worst status, that will only make more people knows.

So, Monday, pretend nothing happens, talk to the SVP asking for more information if you will still work on this project. And nicely and verbally remind him about the confidentiality, that is al you can do.

The more worried you are, the more apologetic you are, then you are indeed making mistakes and will regret in the future.