A computer-implemented method comprising: receiving a set of identity information associated with a subject ; querying one or more databases with at least a portion of the set of identity information; receiving , in response to the querying, personally identifiable information; determining, from the personally identifiable information, a topic and one or more metrics associated with the subject; splitting the one or more metrics into at least two subsets, each subset representing a different metric or range of metrics associated with the topic; ranking, by a predictive model executing on one or more computer processors, a plurality of knowledge-based authentication (KBA) questions, the ranking based on the different metric or range of metrics associated with the at least two subsets and a question pass rate while suppressing false positive KBA questions; determining, from the personally identifiable information, a matching of the subject with a particular subset of the at least two subsets; selecting, based on the ranking and the matching, at least one KBA identity proofing question for presentation to the subject, the at least one KBA identity proofing question having a personally identifiable correct answer; sending , for display on a first computing device associated with the subject, the at least one KBA identity proofing question; receiving , responsive to the sending, a response answer; and responsive to a match between the response answer and the personally identifiable correct answer, sending , for display on the first computing device associated with the subject, a first indication of authentication. receiving a set of identity information associated with a subject ; querying one or more databases with at least a portion of the set of identity information; receiving , in response to the querying, personally identifiable information; determining, from the personally identifiable information, a topic and one or more metrics associated with the subject; splitting the one or more metrics into at least two subsets, each subset representing a different metric or range of metrics associated with the topic; ranking, by a predictive model executing on one or more computer processors, a plurality of knowledge-based authentication (KBA) questions, the ranking based on the different metric or range of metrics associated with the at least two subsets and a question pass rate while suppressing false positive KBA questions; determining, from the personally identifiable information, a matching of the subject with a particular subset of the at least two subsets; selecting, based on the ranking and the matching, at least one KBA identity proofing question for presentation to the subject, the at least one KBA identity proofing question having a personally identifiable correct answer; sending , for display on a first computing device associated with the subject, the at least one KBA identity proofing question; receiving , responsive to the sending, a response answer; and responsive to a match between the response answer and the personally identifiable correct answer, sending , for display on the first computing device associated with the subject, a first indication of authentication. <EOS>