Abstract
When configuring a threshold-based rule, you can choose between two modes:
- Global threshold - A single threshold value that applies equally to all entities. This ensures consistent evaluation across your entire dataset.
- Risk-based threshold - Threshold values that adjust based on the entity’s assigned risk score. This allows you to apply stricter limits for high-risk entities and more flexible limits for low-risk entities, aligning the monitoring logic with your risk management strategy.
When should I use a global vs. risk-based threshold?
- Use a global threshold when you want simple, uniform monitoring that does not depend on entity-specific characteristics.
- Use a risk-based threshold when you want to tailor monitoring to reflect differences in entity risk profiles, ensuring higher sensitivity for higher-risk entities while avoiding unnecessary alerts for lower-risk entities.