According to some embodiments, a system is provided. The system comprises a computing system that is configured to receive an alarm signal from a premises monitoring system that is configured to monitor a premises, receive alarm event data associated with an alarm event, store the alarm event data associated with the alarm event in at least one data store of the computing system, enforce an access control policy on the alarm event data stored in the at least one data store, the access control policy restricting access to the alarm event data based on time and a plurality of roles of a plurality of users of the computing system, perform at least one analytics operation on the alarm event data associated with the alarm event, and update a value of a current alarm score based on an output of the at least one analytics operation.