Abstract: A method for implementing rules in a complex event processing (CEP) engine is shown. The method includes displaying an interactive diagramming tool to a user on a user interface. The method includes receiving, via the interactive diagramming tool, one or more commands to create a rule. The method includes generating the rule for a complex event processing (CEP) engine based on the received commands. The method includes performing a validation process of the rule and, in response to completion of the validation process, integrating the rule into the CEP engine.

Abstract: A building security system includes one or more memory devices configured to store instructions, that when executed on one or more processors, cause the one or more processors to receive, for each of alarm rules, one or more alarm rule parameters for each of the alarm rules from a user device, receive security system data from a security system, and for each alarm rule of the alarm rules determining, based on the one or more alarm rule parameters for the alarm rule, whether the alarm rule is triggered by the security system data and generating an alarm for the alarm rule in response to determining that the alarm rule is triggered.

Abstract: A method for visualizing and managing entities and connections between entities based on a graphical user interface (GUI) node editor includes constructing an entity datablock, wherein the entity datablock is a data structure describing an entity and comprises entity descriptive information, an entity category, an entity name, entity relationships, and an entity identifier. The method includes establishing the entity relationships as bi-directional relationships, wherein the bi-directional relationships link two disparate entities. The method further includes representing the entity datablock as a node and the bi-directional relationships as lines connecting two nodes, wherein the node comprises at least one of the entity descriptive information, the entity category, or the entity name.

Abstract: A building management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to receive threats, the threats each indicating an incident affecting a dynamic risk score associated with an asset, wherein one or more of the threats are current threats that are active at a current point in time and one or more of the threats are historic threats that were active at one or more past times. The instructions cause the one or more processors to generate, based on the one or more current threats, the dynamic risk score at the current point in time, generate, based on the one or more historic threats, a baseline risk score, and cause a user interface to display an indication of the dynamic risk score at the current point in time and an indication of the baseline risk score.

Abstract: A method for visualizing and managing entities and connections between entities based on a graphical user interface (GUI) node editor includes constructing an entity datablock, wherein the entity datablock is a data structure describing an entity and comprises entity descriptive information, an entity category, an entity name, entity relationships, and an entity identifier. The method includes establishing the entity relationships as bi-directional relationships, wherein the bi-directional relationships link two disparate entities. The method further includes representing the entity datablock as a node and the bi-directional relationships as lines connecting two nodes, wherein the node comprises at least one of the entity descriptive information, the entity category, or the entity name.

Abstract: A building management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to receive threats, the threats each indicating an incident affecting a dynamic risk score associated with an asset, wherein one or more of the threats are current threats that are active at a current point in time and one or more of the threats are historic threats that were active at one or more past times. The instructions cause the one or more processors to generate, based on the one or more current threats, the dynamic risk score at the current point in time, generate, based on the one or more historic threats, a baseline risk score, and cause a user interface to display an indication of the dynamic risk score at the current point in time and an indication of the baseline risk score.

Abstract: A building security system includes one or more memory devices configured to store instructions, that when executed on one or more processors, cause the one or more processors to receive, for each of alarm rules, one or more alarm rule parameters for each of the alarm rules from a user device, receive security system data from a security system, and for each alarm rule of the alarm rules determining, based on the one or more alarm rule parameters for the alarm rule, whether the alarm rule is triggered by the security system data and generating an alarm for the alarm rule in response to determining that the alarm rule is triggered.

Abstract: A method for visualizing and managing entities and connections between entities based on a graphical user interface (GUI) node editor includes constructing an entity datablock, wherein the entity datablock is a data structure describing an entity and comprises entity descriptive information, an entity category, an entity name, entity relationships, and an entity identifier. The method includes establishing the entity relationships as bi-directional relationships, wherein the bi-directional relationships link two disparate entities. The method further includes representing the entity datablock as a node and the bi-directional relationships as lines connecting two nodes, wherein the node comprises at least one of the entity descriptive information, the entity category, or the entity name.

Abstract: A method for implementing rules in a complex event processing (CEP) engine is shown. The method includes displaying an interactive diagramming tool to a user on a user interface. The method includes receiving, via the interactive diagramming tool, one or more commands to create a rule. The method includes generating the rule for a complex event processing (CEP) engine based on the received commands. The method includes performing a validation process of the rule and, in response to completion of the validation process, integrating the rule into the CEP engine.

Abstract: A method for visualizing and managing entities and connections between entities based on a graphical user interface (GUI) node editor includes constructing an entity datablock, wherein the entity datablock is a data structure describing an entity and comprises entity descriptive information, an entity category, an entity name, entity relationships, and an entity identifier. The method includes establishing the entity relationships as bi-directional relationships, wherein the bi-directional relationships link two disparate entities. The method further includes representing the entity datablock as a node and the bi-directional relationships as lines connecting two nodes, wherein the node comprises at least one of the entity descriptive information, the entity category, or the entity name.

Abstract: A response management system for a building including memory devices configured to store instructions that cause processors to identify an associated digital standard operating procedure for one or more identified events, identify a responder associated with the standard operating procedure and notify the responder of the standard operating procedure to be conducted in response to the identified events, and monitor the responder conducting the standard operating procedure in response to the identified events. The responder receives a first user interface to a user device indicating an area of the one or more identified events and the standard operating procedure to be conducted, and the responder receives additional including status of the conduction of the standard operating procedure and request for input of data from the responder on the first user interface or a second user interface, the input indicating progression of the standard operating procedure.

Abstract: An alarm system of a building including memory devices configured to store instructions that cause processors to identify an associated digital standard operating procedure for one or more identified events, identify a responder associated with the standard operating procedure and notify the responder of the standard operating procedure to be conducted within the building in response to the identified events, and monitor the responder conducting the standard operating procedure in response to the identified events. The responder receives a first user interface to a user device indicating an area of the one or more identified events and the standard operating procedure to be conducted, and the responder receives additional including status of the conduction of the standard operating procedure and request for input of data from the responder on the first user interface or a second user interface, the input indicating progression of the standard operating procedure.

Abstract: A building security system includes one or more memory devices configured to store instructions, that when executed on one or more processors, cause the one or more processors to receive, for each of alarm rules, one or more alarm rule parameters for each of the alarm rules from a user device, receive security system data from a security system, and for each alarm rule of the alarm rules determining, based on the one or more alarm rule parameters for the alarm rule, whether the alarm rule is triggered by the security system data and generating an alarm for the alarm rule in response to determining that the alarm rule is triggered.

Abstract: A method for visualizing and managing entities and connections between entities based on a graphical user interface (GUI) node editor includes constructing an entity datablock, wherein the entity datablock is a data structure describing an entity and comprises entity descriptive information, an entity category, an entity name, entity relationships, and an entity identifier. The method includes establishing the entity relationships as bi-directional relationships, wherein the bi-directional relationships link two disparate entities. The method further includes representing the entity datablock as a node and the bi-directional relationships as lines connecting two nodes, wherein the node comprises at least one of the entity descriptive information, the entity category, or the entity name.

Abstract: A method for a person of interest (POI) monitoring system including generating a POI data structure, wherein the POI data structure includes an identifier of an individual to be monitored as a POI, causing the POI data structure to include an indication of one or more recipients to be notified upon detection of the individual, receive, from a security device, security data that describes an interaction of the individual with the security device, the security data including the identifier of the individual, determining whether the received identifier matches the identifier of the POI data structure, and causing one or more user devices associated with the one or more recipients to display a GUI notification in response to the received identifier matching the identifier of the POI data structure.

Abstract: A method for visualizing and managing entities and connections between entities based on a graphical user interface (GUI) node editor includes constructing an entity datablock, wherein the entity datablock is a data structure describing an entity and comprises entity descriptive information, an entity category, an entity name, entity relationships, and an entity identifier. The method includes establishing the entity relationships as bi-directional relationships, wherein the bi-directional relationships link two disparate entities. The method further includes representing the entity datablock as a node and the bi-directional relationships as lines connecting two nodes, wherein the node comprises at least one of the entity descriptive information, the entity category, or the entity name.

Abstract: An alarm system of a building including memory devices configured to store instructions that cause processors to identify an associated digital standard operating procedure for one or more identified events, identify a responder associated with the standard operating procedure and notify the responder of the standard operating procedure to be conducted within the building in response to the identified events, and monitor the responder conducting the standard operating procedure in response to the identified events. The responder receives a first user interface to a user device indicating an area of the one or more identified events and the standard operating procedure to be conducted, and the responder receives additional including status of the conduction of the standard operating procedure and request for input of data from the responder on the first user interface or a second user interface, the input indicating progression of the standard operating procedure.

Abstract: A building management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to receive threats, the threats each indicating an incident affecting a dynamic risk score associated with an asset, wherein one or more of the threats are current threats that are active at a current point in time and one or more of the threats are historic threats that were active at one or more past times. The instructions cause the one or more processors to generate, based on the one or more current threats, the dynamic risk score at the current point in time, generate, based on the one or more historic threats, a baseline risk score, and cause a user interface to display an indication of the dynamic risk score at the current point in time and an indication of the baseline risk score.

Abstract: A building management system includes one or more computer-readable storage media having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to receive threats, the threats each indicating an incident affecting a dynamic risk score associated with an asset, wherein one or more of the threats are current threats that are active at a current point in time and one or more of the threats are historic threats that were active at one or more past times. The instructions cause the one or more processors to generate, based on the one or more current threats, the dynamic risk score at the current point in time, generate, based on the one or more historic threats, a baseline risk score, and cause a user interface to display an indication of the dynamic risk score at the current point in time and an indication of the baseline risk score.

Abstract: A connected services system manages assets of building management systems of different organizations. An application server collects information from the assets, which is stored in various data stores associated with an account of the client organization, including an asset store, a group hierarchy store, a user account store, an asset ownership store, and a group ownership store. The group hierarchy store organizes the assets into tiered groups such as campuses, buildings, floors and wings. Users view, on graphical interfaces displayed on the displays of user devices, information from the asset store pertaining to assets that are owned by or shared with them according to the group ownership and asset ownership stores. The graphical interfaces include an asset panel for displaying detailed information about assets, a grouping selector, for filtering which assets for which information is displayed, and a status graphic for providing information concerning the status of the assets.