Abstract: A building security system of a building including one or more memory devices configured to store instructions causing one or more processors to receive door lock data collected from one or more sensors for one or more doors within the building indicating operation of the one or more doors, select a period for which the door lock data was collected, select a first door from the one or more doors of the building for which data is collected, and identify segments of the data indicating activity of the door. The instructions also apply a model to segments of the data indicating activity of the first door, compute a probability metric for each segment of the data, compute a combined probability score for the first door based on the computed probability metrics, and classify the first door as normally functioning or malfunctioning by comparing the combined probability score to a threshold.

Abstract: A building security system includes one or more memory devices configured to store instructions that, when executed by one or more processors, cause the one or more processors to receive multiple alerts relating to a building, the multiple alerts include alert types. The instructions further cause the one or more processors to identify a set of alert disposition options for the multiple alerts based on the alert types, and estimate probabilities of use for the set of alert disposition options. The instructions further cause the one or more processors to calculate alert disposition risk scores using the estimated probabilities of use of the set of alert disposition options, calculate alert risk scores based on a combination of the alert disposition risk scores for the set of alert disposition options of the multiple alerts, and present two or more of the multiple alerts based on the alert risk scores.

Abstract: A building security system of a building including one or more memory devices configured to store instructions causing one or more processors to receive door lock data collected from one or more sensors for one or more doors within the building indicating operation of the one or more doors, select a period for which the door lock data was collected, select a first door from the one or more doors of the building for which data is collected, and identify segments of the data indicating activity of the door. The instructions also apply a model to segments of the data indicating activity of the first door, compute a probability metric for each segment of the data, compute a combined probability score for the first door based on the computed probability metrics, and classify the first door as normally functioning or malfunctioning by comparing the combined probability score to a threshold.

Abstract: A risk management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to perform natural language processing to categorize threats to assets and perform correlated risk analyses for threats. The instructions cause the one or more processors generate risk scores for assets using threat data and one or more asset risk profiles reflecting characteristics of the assets, the risk scores weighted based on impact weights of threats. Furthermore, the instructions cause one or more processors to generate a plurality of graphic user interfaces including one or more of a map providing visual representations of the assets, locations of the assets, asset risk scores, and threats to assets, a forecast of asset risk scores, an asset summary, an asset risk profile editor, and a consolidated view of rank ordered assets and threats.