You don't have time to review every HTTP request as it happens, but if something goes wrong you can examine all of those HTTP requests to find out what. Similar

You don't have time to review every HTTP request as it happens, but if something goes wrong you can examine all of those HTTP requests to find out what. Similarly, IT security at many institutions, including those that handle classified information, seem more concerned with ensuring the culprit can be discovered when a leak happens than with making the information systems more leak-resistant. It's enough for the executives that the information is gathered and the audit trail established. Honestly, getting an auditable log of the developers' thought process is such a wet dream for management at software shops that companies will use any excuse to become a dystopian hellscape in pursuit of it. One such company used the following rubric: Compliance with the Sarbanes-Oxley act requires full auditability of anything that may affect the company's stock price, including the software's source code and any changes made thereto. Therefore, all developers must make a log in the bug tracker of what they're doing every 15 minutes to ensure an audit trail of developer activity. Agile just happens to be the excuse that gained traction, because it's easy to dress up as something that's good for developers and it's not as ridiculously onerous as the above.