There is a fine balancing act between maintaining rules in a fraud strategy and identifying when stepped-up authentication is needed and fruitful. Yet too often, old rules and user friction live on beyond their useful lives. These systems need to be monitored and updated over time as attack vectors change and effectiveness wanes. This discussion will focus on how to know when change is needed and what is working today.