1. A method of managing data and events in a physical security management process comprising: defining a first plurality of objects representing actors, facilities, assets within a managed site; defining a second plurality of objects representing actions, conditions and references; constructing a rule from the first plurality of objects and second plurality of objects through connectors that dictate process flow by the first and second plurality of objects; receiving a plurality of signals from disparate security devices distributed throughout the site; normalizing the plurality of signals to a common standard format; processing the signals through the rule to perform an action in accordance with the rule.