An automation system including sensors that detect threats within a secured area, a plurality of prospective events defined within a memory of the automation system, each event including at least a physical change in an environment of the secured area, a time of execution of the physical change and a corresponding actuator that causes the physical change, a processor of the automation system that periodically activates the corresponding actuator at the time of each of the plurality of events, a processor that monitors each of the plurality of sensors for activation by an authorized human user and that saves a record of each activation to a cloud memory and a cloud processor that monitors the saved activation records of each sensor over a time period, determines a difference between the saved activations and the plurality of events and that modifies the plurality of events based upon the determined differences.