Computer monitoring software should be designed and set up to monitor hardware and software, not people.

This isn’t to say that it can’t monitor people, but that shouldn’t be how it is architected.

Identity monitoring software on the other hand… that should be monitoring people, with the goal to protect their PII from unauthorized access.