IM Relationship Resolution Information Center, Version 4.2

IBM Relationship Resolution Event Manager

IBM Relationship Resolution Event Manager extends the capabilities of IBM Relationship Resolution by combining near real-time event analysis and event monitoring with entity and relationship resolution. When enabled, Event Manager provides your organization with the ability to track business events and alert on suspicious events or events of interest, so that you can take the appropriate business action in a timely manner, to assist your organization in its fight against threat and fraud.

Because the threat and fraud scenarios are constantly changing, Event Manager provides you with the flexibility to define the types of events to track, and configure the business rules for processing events and generating event alerts. These rules are a set of criteria that Event Manager uses to determine how events are processed and what triggers an event alert. You configure the business rules, based on your business needs and scenarios, and you decide the sequence or priority of how the rules are executed.

You also decide what constitutes an event alert. Event alerts are not usually triggered by a single event, but by a series of complex events that all happen at different times, within different contexts. For example, you might define a business rule that aggregates money transfers by customer over a given time period, and generates an alert if the total amount exceeds the legal limit. Or you might define a business rule that alerts you when two credit card purchases using the same credit card number occur within the same hour at locations more than 200 miles apart.

Event Manager works as an add-on to IBM Relationship Resolution. If Event Manager is installed and enabled, whenever the pipeline detects that incoming UMF data includes information in the EVENT data segment, the pipeline processes the data for entity resolution and passes on the processed data to CEP, the IBM complex event processor tool. CEP processes the event data, making decisions based on the configured event business rules, and returns the decision information back to IBM Relationship Resolution, where the event information is stored in the entity database. If there are any event alerts associated with an event or combination of events, you can configure Event Manager to display those event alerts in the Visualizer, for further analysis and disposition by analysts or investigators.

You can also configure your client application so that CEP can return immediate decisions to the client application, providing your organizational representatives with on-the-spot information. For example, CEP could immediately alert your customer service representatives to stop a transaction, such as a wire transfer that would exceed the legal dollar limit allowed for a customer to transfer within a 24-hour time period.



Feedback

Last updated: 2009