If logging is not sufficiently planned, IT systems or applications may not be monitored and security-relevant events may not be recognised and appropriately dealt with as a result. In addition, it will be impossible to trace data protection infringements back to their causes.