How ScoreCard Works
ScoreCard is an automated risk engine that computes a customer risk score and risk level based on configurable factors, parameters, and weighting rules.
Computation model
ScoreCard uses a factor-based scoring framework:
Parameters collect data values
Each Parameter maps to a specific data field, for example nationality or politically exposed person. Parameters retrieve their value from the Profile's identity data or AML results.
Risk maps assign scores to values
Each parameter value is mapped to a risk level and risk score via a Risk Map, for example nationality IRN → High risk → score 3. Values not in the map are handled as mismatched with a configurable fallback score.
Risk factors aggregate parameters
Each Risk Factor groups one or more Parameters. The factor's score is derived from its parameters using Standard logic, for a single parameter, or Max logic, using the highest-scoring parameter among multiple parameters. Each factor has a configured weight (%).
Customer risk score computed
The final customer risk score = sum of each factor's score × factor weight. The score maps to a risk level, for example Low, Medium, High, or Prohibit, based on the configured thresholds.
Rules can override the score
Business Rules can override the computed risk level upward, for example if PEP, minimum risk level = High. Rules do not lower the score — they can only escalate it.
Information flow
| Scenario | Data source | ScoreCard action |
|---|---|---|
| New Profile with nationality submitted | Profile fixedInfo.nationality | Compute score using nationality parameter |
| AML screening — no hit | AML step result | PEP/Sanctions parameters = No → include in score |
| AML screening — hit, case open | AML Alert (open case) | Tag score as "Update required" — hold existing score until case closes |
| AML screening — hit, case closed | AML Alert (latest result) | Recalculate score with final PEP/Sanctions values |
| Ongoing Monitoring — new hit | OGS alert | Tag score as "Update required" until alert resolved |
ScoreCard scope
ScoreCard is computed at the Profile level, not the Application level. One active ScoreCard per Profile exists at any time. Applications trigger recomputation when they complete, but the score is stored on the Profile.
Updated 18 days ago