Abstract: A novel method and system for constantly monitoring security-monitoring assets (SMAs) and automatically determining whether security alerts are related to the same security event. The invention improves on existing technology by automatically assessing the geospatial location data of any SMAs responsible for initiating a security alert. The system automatically determines if any of the security alerts are related based on their proximity and the elapsed time between security alerts. If the security alerts occur within the defined proximity (relational zone) and/or relational timeframe, they are automatically grouped together to be processed as a single security event. Depending on the type of security alert, the system may rely solely on proximity or elapsed time. The system is constantly updating to ensure that proper associations are maintained at all times.