Measure How Financial Crime Cases Are Investigated and Identify Where Capacity Can Be Released

Pyze measures how analysts perform KYC refresh, transaction monitoring alert investigation, sanctions screening and suspicious activity report preparation, and identifies where time is spent outside the case management system.

6
workflows measured, from KYC refresh to SAR and STR preparation
1 week
to instrument, no workflow change
5
levers separated before anything is built
6 weeks
to a priced opportunity register

Engagement archetypes from Pyze deployments across financial crime and compliance operations rather than a single named account.

Case management systems record the alert, the disposition and the filing. The investigation between them is performed across the monitoring platform, screening tools, data providers, internal customer records, the case tool and spreadsheets. Volumes and closure rates are measured, but the way each analyst reaches a decision is not, and it varies between analysts on the same case type.

Common Findings in KYC and Financial Crime

Four patterns that recur across engagements, each shown with the measurement and the resulting change.

Periodic KYC reviews require analysts to rebuild the customer file from several sources, including for customers whose circumstances have not changed.

Automate
What the measurement shows

Analysts retrieve ownership, identification and activity information from the customer record, registry sources and prior review documents, then assemble it into the review template. Much of the assembly is repeated from the previous cycle.

What changes

The customer file is assembled from source data and compared with the prior review, and analysts examine only the elements that have changed.

Transaction monitoring alerts are closed at different speeds and with different amounts of investigation for the same alert scenario.

Agentify
What the measurement shows

The number of systems consulted per alert and the time to disposition vary by analyst within each scenario. A high proportion of alerts are closed with no escalation after the same sequence of checks.

What changes

Alerts that follow a consistent closing pattern are investigated and dispositioned with the evidence recorded, and analysts review the ones that require judgment.

Sanctions screening and adverse media produce potential matches that require review, and most are discounted.

Standardize
What the measurement shows

Analysts compare match details against the customer record and external sources, and the discounting rationale is repeated across matches of the same type. The time per match differs between analysts.

What changes

Discounting criteria are documented from the practice of the most consistent analysts, and recurring match types are resolved against them.

SAR and STR preparation takes extended time and quality review returns drafts for rework.

Simplify
What the measurement shows

Narrative drafting, evidence gathering and quality review are performed in sequence by different people. Rework concentrates on a small number of recurring gaps in the supporting evidence.

What changes

Evidence requirements are met at the investigation stage, and the narrative is assembled from the case record for analyst review.

Opportunity Register

A sample register, sorted by the lever that resolves each opportunity. In an engagement, each line carries measured hours, a named owner and the evidence it was derived from.

KYC periodic review
Automate
Customer file assembled from source data and compared with the prior review.
Transaction monitoring alert disposition
Agentify
Consistent-pattern alerts investigated and closed with evidence recorded.
Sanctions and name screening review
Standardize
Discounting criteria documented and applied consistently.
Adverse media review
Agentify
Relevant results identified and summarized for analyst review.
SAR and STR drafting
Agentify
Narrative assembled from the case record for analyst review.
Second-line quality review
Simplify
Review depth matched to the measured return rate by case type.
Case allocation
Rebalance
Cases assigned against measured effort by type and complexity.
Automate and Agentify are distinct findings. Scheduling a report is deterministic work with a stated rule. Diagnosing an exception is a decision. Separating the two prevents a register from over-scoping the first and missing the second.

Systems typically instrumented

NICE ActimizePegaFenergoSalesforceSanctions and screening providersCompany registry and data providersCase management toolsExcel and Outlook

Capture covers browser-delivered and thick-client applications, including virtualized estates, with no change to how anyone works.

Roles Involved

KYC operationsTransaction monitoringSanctions screeningFinancial intelligence unitCompliance operations

Instrumentation is configured per application rather than per person, so the population in scope is set during scoping and is not a deployment constraint.

How an Engagement Runs

Baseline, blueprint, transform, prove

The same four stages apply in every sector. The fourth stage repeats the baseline measurement, which makes the engagement an ongoing operating capability rather than a one-time report.

01

Baseline

What the work costs today, measured across every person and application.

02

Blueprint

Procedures, application rules and execution evidence, read as one target state.

03

Transform

Where each of the five levers applies, priced and owned.

04

Prove

The after state measured against the baseline, using the same method.

Frequently Asked Questions

Does this make any decisions about alerts or customers?
No. Pyze measures how the work is performed. Disposition decisions remain with analysts and with the controls the institution has defined. Any change to a control is made by the institution and reviewed through its own governance.
How is the data protected, given the sensitivity of financial crime work?
Capture is limited to interaction metadata: the application, screen, sequence and timing. It applies only to a whitelist of business applications and does not record keystrokes, field values, free text or screen contents. Identifiers are pseudonymous, and no case or customer content is captured.
We already report alert volumes and closure rates. What does this add?
Volume and closure reporting describes outcomes. Pyze measures the investigation steps that produce them, such as the systems consulted, the order of checks and the time in each, so differences between analysts and case types can be identified.

Associated Titles

Chief Compliance OfficerHead of Financial Crime OperationsHead of KYC OperationsMoney Laundering Reporting OfficerDirector of Transaction MonitoringHead of Sanctions ScreeningDirector of Compliance OperationsDirector of Operational Excellence

Industries

Roles

Start with a measured baseline

Six weeks from instrumentation to a priced opportunity register, and the baseline stays in place so later quarters are measured rather than re-estimated.