whats the end game here?

we use a mss provider for our log management. why would our ciso not want logs to be sent from certain systems into our log collector. been in it for 20 plus years and have been involved in PCI and SOC2 for many years. whats the endgame of this?

ciso cybersecurity end endgame game log log management logs management mss pci soc2 systems