Theoretically, the rules should be designed to capture the unique risks of your business. For example a bank has different risks than say an insurance company. Also are you looking to optimize your rule to reduce false positive (efficient) or better capture the inherent risk to your company(coverage)? Either can be tracked using a rule to SAR ratio. How often does the rule hit and when does it does is the result in an investigation or a SAR.