...
This compliant solution uses the thread and exception safe java.util.logging.Logger
class to implement logging. Although there are several statements that can throw exceptions, all of them execute before any security critical operations; consequently any exceptions thrown from these statements cannot interfere with logging during the security critical operations. See guideline EXC03ERR03-J. Use a logging API to log critical security exceptions for more information on the use of logging libraries.
...