A system includes plural sensor devices installed at a premises and a server computer coupled to a network and in communication with a gateway, which receives a risk profile for a physical premises, collect sensor information from the plural sensor devices and receives data feeds relevant to a location of the physical premises and execute one or more learning models to continually analyze the collected sensor information and data feeds to produce operational decisions based on the sensor information and data feeds to predict changes to risk profiles based on the continual analysis of sensor information and which determines responses to new risk profiles that are produced. The system also includes an engine for monitoring the sensor devices to recognize occurrences of events, and ask, through an interface to a human for additional information to confirm an occurrence of one or more of the events.