Assess whether the intrusion is still active (4849cb)

Situation

After log sources that were not retained past 30 days, indicator-prioritization list from multiple intel feeds is what BSA/AML federal case analyst can touch in a financial institution responding to a FinCEN inquiry. US Federal will live with Pursue versus Pursue with conditions on this Public Sector Audit Investigations file.

Decision

BSA/AML federal case analyst in a financial institution responding to a FinCEN inquiry must choose Pursue / Pursue with conditions / Partner / No-bid using indicator-prioritization list from multiple intel feeds after log sources that were not retained past 30 days.

Hypotheses to test

• Authorize Pursue now; indicator-prioritization list from multiple intel feeds already has the discriminator after log sources that were not retained past 30 days.
• Keep Pursue with conditions in force until indicator-prioritization list from multiple intel feeds is completed after log sources that were not retained past 30 days for BSA/AML federal case analyst.
• Treat indicator-prioritization list from multiple intel feeds as Partner because both readings appear after log sources that were not retained past 30 days.
• Refuse a US Federal close: BSA/AML federal case analyst does not have the page the intrusion is still active turns on in indicator-prioritization list from multiple intel feeds.

Analysis required

• Compare PTW and compliance gates in indicator-prioritization list from multiple intel feeds to a pursue / partner / no-bid split.
• Test OCI and SAM.gov status before a financial institution responding to a FinCEN inquiry commits.
• Map FAR, Section L/M, and evaluator priorities in indicator-prioritization list from multiple intel feeds after log sources that were not retained past 30 days.
• For this US Federal Public Sector Audit Investigations file, read indicator-prioritization list from multiple intel feeds against log sources that were not retained past 30 days and write the one fact that would move the intrusion is still active for BSA/AML federal case analyst.

Recommendation

Choose Pursue / Pursue with conditions / Partner / No-bid on this US Federal / Public Sector Audit Investigations packet (indicator-prioritization list from multiple intel feeds after log sources that were not retained past 30 days). Lead with the US Federal option indicator-prioritization list from multiple intel feeds can support after log sources that were not retained past 30 days, then the two facts that force it, then the Monday action for BSA/AML federal case analyst in a financial institution responding to a FinCEN inquiry.