and for audit. Audit/Compliance is one of the worst yet valid reasons to introduce complexity, redundancy and all sorts of costs into projects. It's also why some people earn a living out of it purely.

Authentication, authorization and access logs typically. Generic application logs can often be treated differently.