The technical capability to observe and record the actions and activities of an individual, at any time, on any device accessing U.S. Government information in order to detect insider threat and to support authorized investigations.
Sources:
CNSSI 4009-2015
from
CNSSD No. 504