input: [Vulnerabilities] inadequate logging due to design oversight or insufficient security requirements planning log files lost, damaged, or simply not adequately secured to comply with legal evidentiary standards [Countermeasures] Facilities for automated, secure logging, which provide the basis for a number of essential functions: audit trails that guarantee non-repudiation automatic database recovery following interrupted operations diagnosing unexplained failures intrusion detection and forensic analysis tracking down and prosecuting cyber-criminals [Element / Threat] 
output: Accountability preserving a record of what was done and by whom Threat: A transaction becomes untraceable and refutable, because of failure to capture and retain data proving its source.