1. A system, comprising: a memory storing a plurality of instructions; and one or more processors configured to access the memory, wherein the one or more processors are further configured to execute the plurality of instructions to at least: identify a key performance indicator associated with business event data; generate a first query for the key performance indicator; generate a relation based at least in part on a stream of the business event data; implement the first query against the relation to receive first data corresponding to the key performance indicator associated with the business event data; store a first snapshot of the first data corresponding to the key performance indicator in a data table; identify a risk indicator associated with the key performance indicator based at least in part on the key performance indicator; implement a second query against the relation; receive second data corresponding to the risk indicator based at least in part on the second query, the risk indicator identifying a change in the second data above a threshold amount corresponding to the first data, the second data corresponding to the risk indicator received by at least listening to event output of the second query; store a second snapshot of the second data corresponding to the risk indicator in the data table; associate the data table with a key performance indicator watchlist; generate information for presenting a risk dashboard user interface comprising a first visualization associated with the first snapshot of the first data corresponding to the key performance indicator associated with the key performance indicator watchlist and a second visualization associate with the second snapshot of the second data corresponding to the risk indicator associated with the key performance indicator watchlist; and present the first visualization and the second visualization in the risk dashboard user interface.