function z_score(value, mean, std_dev):
   return (value - mean) / std_dev


 function is_anomalous(transaction, baseline, threshold=3):
   return abs(z_score(transaction.amount, baseline.mean, baseline.std_dev)) > thre
 shold
 # flags values far from the typical pattern for closer review
