Logs of applications and APIs are not monitored for suspicious activity

Regular review of logs by a dedicated security team.

Warnings and errors generate no, inadequate, or unclear log messages.

Warnings and errors are logged with sufficient user context