When a security-critical event occurs, the software either does not record the event or omits important details about the event when logging it.