False positive rate: target < 20%; >30% requires recalibration - Overdue alerts (>5 days): zero tolerance; 10+ requires escalation - SAR filing on time: 100% required; any breach is a regulatory event