Triage Analyst

Triage analysts evaluate incoming investigations, identify suspicious events, and determine a disposition for each investigation. For example, this role might close false positives or escalate high-priority, suspicious transactions to an Investigator for further action.

Investigations typically originate from an analysis flow. When the analytic detects something in a transaction or a claim that exceeds the set threshold, the investigation is generated and routed to the triage analyst.

The analyst who reviews the investigation has all the relevant data element at his fingertips, such as the customer name, account number, and transaction history. Having this data available allows the analyst to make a quick decision without spending time gathering details from different sources. Keep in mind that IBM® Counter Fraud Management learns from previous investigation resolutions to provide accurate and improved scoring for investigations.

Depending on his review of investigation task details, a triage analyst decides quickly whether to investigate or close without action. An analyst can indicate one of the following resolutions:
  • Close the investigation if fraud is not suspected.
  • Confirm that the investigation warrants further investigation.

If need be, the analyst who is triaging investigations can add documents and notes to an investigation before indicating a disposition. The analyst can also search for and add a related object, such as a related transaction, account, or event. The analyst can create business objects if needed. However, one thing a triage analyst cannot do is reprioritize an investigation (High, Medium, or Low) or move it to the in-basket of another triage member. Only a triage analyst's supervisor has permission to make such changes.

The Triage analyst can edit investigation property values. Triage analysts can change the Assessment value of investigations that were manually created. Triage analysts cannot change the Assessment value of investigations that were created by an analytic.

Note: When a user in the Triage Analyst role views an investigation that has not been assigned to anyone, that investigation is automatically assigned to that user.