{
  "question_text": "When an investigation results in a 'SAR filed' disposition, what step must you take in addition to initiating the SAR filing process?",
  "options": [
    "Attach the monitoring alert record to the SAR case file",
    "Close the alert log entry and mark it as resolved",
    "Transfer the alert to the threshold review log for future reference",
    "Notify the teller supervisor who escalated the original alert"
  ],
  "correct_answer": "Attach the monitoring alert record to the SAR case file",
  "correct_response": "Correct. When the disposition is SAR filed, you initiate the SAR filing process and attach the monitoring alert record to the SAR case file. This creates a direct link between the monitoring trigger and the filed report.",
  "incorrect_response": "When the disposition is SAR filed, the monitoring alert record must be attached to the SAR case file. This step is required — it links what the monitoring program detected to what was ultimately reported.",
  "unsure_response": null,
  "question_bank": [
    {
      "question_text": "In addition to the annual threshold review, when else must you review and potentially adjust monitoring thresholds?",
      "options": [
        "After any significant change in transaction volume, customer mix, or regulatory guidance",
        "After any SAR filing, to verify the triggering threshold remains appropriate",
        "At the beginning of each calendar quarter, regardless of changes in activity",
        "Whenever a supervisor escalates more than three alerts in a single month"
      ],
      "correct_answer": "After any significant change in transaction volume, customer mix, or regulatory guidance",
      "correct_response": "Correct. Threshold reviews are required annually and also after any significant change in transaction volume, customer mix, or regulatory guidance. Each review must be documented in the threshold review log with the prior and revised thresholds, the data reviewed, and the rationale for each adjustment.",
      "incorrect_response": "Threshold reviews are triggered by two things: the annual cycle and significant changes in transaction volume, customer mix, or regulatory guidance. Reviews prompted by those changes must be documented the same way as annual reviews — prior threshold, revised threshold, data reviewed, and rationale.",
      "unsure_response": null
    },
    {
      "question_text": "Why must you document every alert disposition, including dispositions of 'Cleared'?",
      "options": [
        "An undocumented disposition leaves no record that the alert was properly resolved",
        "Regulators require a complete count of all disposition types in the annual report",
        "The SAR referral log can only be maintained if all dispositions are recorded",
        "Teller supervisors must be able to verify investigation outcomes independently"
      ],
      "correct_answer": "An undocumented disposition leaves no record that the alert was properly resolved",
      "correct_response": "Correct. An undocumented disposition — even a 'Cleared' disposition — leaves no record that the alert was properly resolved. From an examiner's perspective, an alert with no documented outcome is an alert that was never handled.",
      "incorrect_response": "Documentation is required for every disposition because an undocumented disposition leaves no record that the alert was properly resolved. This applies to all three dispositions: Cleared, SAR filed, and Continued monitoring.",
      "unsure_response": null
    }
  ],
  "enrichment_content": "<p><strong>Three dispositions, each with documentation requirements.</strong></p><ul><li><strong>Cleared</strong> — no suspicious activity identified; document the rationale and close the alert.</li><li><strong>SAR filed</strong> — suspicious activity confirmed; initiate the SAR filing process and attach the monitoring alert record to the SAR case file.</li><li><strong>Continued monitoring</strong> — alert is inconclusive; flag for 30-day follow-up.</li></ul><p>Every disposition must be documented. An undocumented disposition leaves no record of resolution and cannot be produced during an examination.</p>"
}