Methods are disclosed that, in some aspects, provide detecting an alarm event, determining whether the alarm event is a deviation from predefined criteria, and transmitting an alert notification to users of the
security system if the alarm event is a deviation from the predefined criteria. The predefined criteria may relate to the location or type of one or more sensors of the
security system, the location of users of the
security system, the
time of day, activities within the premises, and / or behavioral patterns of the users learned by the security
system. Information transmitted in the alert notification may relate to the location of one or more users of the security
system, the data recorded by one or more sensors of the security
system, the state of alert of the security system, and / or confidential information required to terminate the alarm event.