A key barrier to adopting probability based rules is defining what number represents an acceptable risk. Until industry standards are developed (currently under consideration in the ISCWSA) clients are unlikely to require reporting based on probability based rules.
Post your comment on this topic.