I work in IT security profession as an IT auditor working in a lead / mentor role for my team.

Sometimes, one may not have sufficient concrete evidence to come to a conclusion such as regarding whether fraud is present or not. However, with intuition derived from a combination of experience and training, one can often tell more likely than not whether an event is legitimate or suspicious / fraudulent.

For example, in a batch of similar items, one might have a significantly different date much earlier or later than peers in the same batch, or transaction amounts just might be too "round"

How can I develop the intuition of team members to pursue deeper investigations in these types of cases?

closed as off-topic by gnat, Mister Positive, Masked Man, JasonJ, scaaahu Mar 8 '17 at 14:45

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions asking for advice on what to do are not practical answerable questions (e.g. "what job should I take?", or "what skills should I learn?"). Questions should get answers explaining why and how to make a decision, not advice on what to do. For more information, click here." – gnat, Mister Positive, Masked Man, JasonJ, scaaahu
If this question can be reworded to fit the rules in the help center, please edit the question.

  • The answer is in your question - with "a combination of experience and training". It worked for you, right? – AakashM Mar 8 '17 at 9:10
  • Oh! I know this one! The specific training technique you're looking for is called perceptual learning (en.wikipedia.org/wiki/Perceptual_learning) I heard about it in this talk, conveniently titled "Cultivating Instinct", by Katrina Owen (youtube.com/watch?v=SKlIQLb7U00). – Mel Reams Mar 8 '17 at 16:23

I don't know whether this is applicable to your workflow or not, but you could get team members to pair up in some way.

Player 1 - Has a first crack at a case and documents findings
Player 2 - Has an independent view on the same case and also documents findings.

Players 1 & 2 - compare notes and learn from each other.

The added benefit is that the findings from both players are combined into a greater total. Case accuracy increases, employee ability increases.

Swap the teamings around so that sometimes experiences people effectively mentor less experienced team members, and equally skilled teamsters compete with each other.

You could explore gamification as well.

Not the answer you're looking for? Browse other questions tagged or ask your own question.