Security system risk calculation

A system for risk assessment, the system comprising:

• processor circuitry;
• and
• a non-transitory computer-readable memory storing program instructions executable by the processor circuitry for:
• associating, at a server, a respective device sensitivity to each of a plurality of devices disposed within multiple zones of a site and a respective zone sensitivity to each of the multiple zones, the plurality of devices connected with the server over an IP network, wherein the plurality of devices monitor the site;
• obtaining, at the server and over the IP network, communications from the plurality of devices;
• monitoring, using the communications, the plurality of devices to get status information from the communications;
• determining an aggregate risk for the site based on the zone sensitivities, the device sensitivities, and the device status information, wherein the aggregate risk is proportional to a number of devices in an error status and inversely proportional to a total number of the plurality of devices;
• and
• outputting, to a user, an indication of the aggregate risk.