insufficient logging and monitoring