Assess whether a provider should be suspended pending SIU (47cb0b)

Situation

After an email that matches a known BEC lure almost exactly, account-takeover device-fingerprint graph is what SIU investigator can touch in a P&C carrier's auto-body network. Fraud Detection will live with Remove access or reverse the item versus Temporary compensating control on this Mortgage Fraud file.

Decision

SIU investigator in a P&C carrier's auto-body network must choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold using account-takeover device-fingerprint graph after an email that matches a known BEC lure almost exactly.

Hypotheses to test

• An email that matches a known BEC lure almost exactly is noise around an already-controlled Mortgage Fraud process in a P&C carrier's auto-body network, given account-takeover device-fingerprint graph.
• An email that matches a known BEC lure almost exactly is the event in account-takeover device-fingerprint graph that forces Remove access or reverse the item for SIU investigator under Fraud Detection.
• Account-takeover device-fingerprint graph shows a one-file miss after an email that matches a known BEC lure almost exactly, not a Mortgage Fraud program failure.
• Account-takeover device-fingerprint graph cannot decide a provider should be yet after an email that matches a known BEC lure almost exactly; hold is the only Fraud Detection close a P&C carrier's auto-body network can defend.

Analysis required

• Check mule or round-trip markers in account-takeover device-fingerprint graph.
• Map typology and hold authority SIU investigator actually has in a P&C carrier's auto-body network.
• Trace funds, counterparties, and reversals in account-takeover device-fingerprint graph through the window opened by an email that matches a known BEC lure almost exactly.
• For this Fraud Detection Mortgage Fraud file, read account-takeover device-fingerprint graph against an email that matches a known BEC lure almost exactly and write the one fact that would move a provider should be for SIU investigator.

Recommendation

Choose Remove access or reverse the item / Temporary compensating control / Approve a documented exception / Hold on this Fraud Detection / Mortgage Fraud packet (account-takeover device-fingerprint graph after an email that matches a known BEC lure almost exactly). Lead with the Fraud Detection option account-takeover device-fingerprint graph can support after an email that matches a known BEC lure almost exactly, then the two facts that force it, then the Monday action for SIU investigator in a P&C carrier's auto-body network.