Building security system with alarm lists and alarm rule editing

A building system comprising one or more memory devices storing instructions thereon that, when executed by one or more processors, cause the one or more processors to:

• receive site data for a plurality of sites, the site data indicating geographic locations of the plurality of sites and equipment data of systems of the plurality of sites;
• perform a clustering technique with the plurality of sites by:
• generating a plurality of clusters based on the geographic locations of the plurality of sites;
• and
• classifying the plurality of sites into the plurality of clusters based on the geographic locations of the plurality of sites;
• generate, based on the equipment data of the systems of the plurality of sites and a classification of the plurality of sites into the plurality of clusters, a first metric of a first group of sites of the plurality of sites assigned to a first cluster of the plurality of clusters and a second metric of a second group of sites of the plurality of sites assigned to a second cluster of the plurality of clusters, wherein the first metric indicates whether a first performance of the first group of sites meets a criterion, and the second metric indicates whether a second performance of the second group of sites meets the criterion;
• and
• cause a user device to display a user interface providing the classification of the plurality of sites into the plurality of clusters and the first metric of the first cluster and the second metric of the second cluster.

One or more memory devices storing instructions thereon that, when executed by one or more processors, cause the one or more processors to:

• receive site data for a plurality of sites, the site data indicating geographic locations of the plurality of sites and equipment data of systems of the plurality of sites;
• perform a clustering technique with the plurality of sites by:
• generating a plurality of clusters based on the geographic locations of the plurality of sites;
• and
• classifying the plurality of sites into the plurality of clusters based on the geographic locations of the plurality of sites;
• generate, based on the equipment data of the systems of the plurality of sites and a classification of the plurality of sites into the plurality of clusters, a first metric of a first group of sites of the plurality of sites assigned to a first cluster of the plurality of clusters and a second metric of a second group of sites of the plurality of sites assigned to a second cluster of the plurality of clusters, wherein the first metric indicates whether a first performance of the first group of sites meets a criterion, and the second metric indicates whether a second performance of the second group of sites meets the criterion;
• and
• cause a user device to display a user interface providing the classification of the plurality of sites into the plurality of clusters and the first metric of the first cluster and the second metric of the second cluster.