An organization's automated surveillance system identifies large fluctuations in customer activity. As a result of an audit, the compliance officer is informed that the system is not generating alerts when activity is consistently abnormal over a long period of time. Currently the organization is evaluating new alert scenarios in an attempt to address this problem.
Which type of scenario is helpful in mitigating this weakness?