• when to log
• what to log
• what not to log
• CWE categories