Investigation & governance
Alert investigation, false-positive management, screening governance, and how programmes are tested and tuned responsibly.
- 0112 MINAlert investigation and false positivesMost alerts are innocent lookalikes; the discipline is proving it with evidence — and recognising the rare true match that must be escalated.AFTER: Name matching and fuzzy logic · Secondary identifiers and confidence
- 029 MINGovernance and policyScreening is defensible only when someone owns it: written policy, a documented risk assessment, and change control over every setting.AFTER: Alert investigation and false positives
- 039 MINTesting and tuningHow do you know the filter catches what you think it catches? Testing proves it; tuning changes it — only with evidence and approval.AFTER: Governance and policy