Setting up your review system
The following sections describe the steps to take to set up your review system.Adding alert review queues
Alert review queues contain a list of alerts that you can assign to a team or an individual for investigation. To set up an alert review queue, follow these steps:Adding alert review statuses
Real-Time Decisioning provides three default alert review statuses: New, Open, and Closed. You can optionally define custom review statuses in addition to the default ones. To define custom review statuses, follow these steps:Working with review decisions
Use review decision sets to assign appropriate review decisions, such as Closed or Confirmed Fraud, to alerts. Your alert reviewers can select the appropriate review decision when reviewing transaction event alerts. The following sections describe the steps to take to add review decision sets.Defining review decisions
To define review decisions, follow these steps:Adding review decision sets
To add a review decision set, follow these steps:Select the review decisions you want to include in the review decision set from the Add Review Decision dropdown list.
Configuring review workflow buttons
Configure review workflow buttons to enable your alert reviewers to apply review decisions to transaction event alerts. To configure a review workflow button, follow these steps:Select which user roles can access the review workflow button in the Users in the following roles can see the button field.
Check the items that impact the review workflow button’s behavior in the The button is used to act on section:
- Alerts: This selection enables the review workflow button to appear on the Alert Queue page and Event Details page for alerted events.
- Non-alerting events or a mix of non-alerting events and alerts: This selection enables the review workflow button to appear in the Event Details page for unalerted events, and in the Event Table in the Knowledge Graph.
- Entities: This selection enables the review workflow button to appear on the Entity Details page and in the Entity Table in the Knowledge Graph.
Enable Allow to change status to the following to allow reviewers to change the status of a case. If allowed, select all the statuses to which the reviewer can change the case.
Check Default status selection to specify the default status option when the reviewer clicks the review workflow button.
Check Allow to change queue to the following to allow reviewers to move a case to another queue. If allowed, select all the queues to which the reviewer can move the case.
Check Default queue selection to specify the default queue option when the reviewer clicks the review workflow button.
Check Allow to change assignee to the following to allow reviewers to assign a case to another user. If allowed, select all the reviewer accounts to which the reviewer can assign the case.
Check Default assignee selection to specify the default assignee option when the user clicks the review workflow button.
Check Make decision to allow reviewers to make decisions on a case. The reviewer can also configure the review workflow button to make the decision on a specific decision set or to use a decision set based on the event type. When selecting a specific decision set, reviewers must enter the decision set and a default decision selection.
Select a Case Creation option to specify whether the review workflow button allows reviewers to create a case from it: No Creation, Optional, or Mandatory. If case creation is allowed—and the reviewer chooses to create a case—the reviewer is shown a range of options and inputs to create a new case from the existing alert event.
Working with alerts
The following sections describe additional ways to work with alerts and alert queues.Automating alerts using rule actions
You can generate alerts and add them to any existing alert review queue using rule actions. To enable a rule to generate an alert, then send it to an existing review queue, follow these steps:On the Rules Engine page, select the rule for which you want to generate alerts.