To what extent are users’ system use logged and monitored and are failed log in attempts recorded and reviewed on a regular basis?

We use several methods to monitor employees internally from event log management and aggregation to endpoint detection. These are reviewed regularly as well as alerts in place to flag unusual activity.