EnterpriseSecurityException maintains two separate messages: a log message containing technical details for developers (written to log files, not shown to users) and a user message with sanitized, safe information appropriate for display to end users without exposing sensitive system details.