Which option correctly identifies the concept used for post-event analysis after an alarm activation?

• A. Live surveillance
• B. Postevent reconstruction
• C. Deterrence
• D. Assessment of alarm activation to determine cause and initiate appropriate response

Answer: (B)

Post-event reconstruction is the process of reconstructing the sequence of events after an alarm activation to understand what happened, why it happened, and how to respond more effectively in the future. It involves collecting and analyzing evidence from multiple sources—alarm logs, video footage, access control records, sensor readings, and witness statements—to create a clear timeline, identify whether the activation was legitimate or false, determine root causes, and outline corrective actions or improvements. Live surveillance is about real-time monitoring during the incident, not after, and deterrence focuses on preventing incidents before they occur. The description in the other option reflects actions taken after activation, but the established concept name for the post-event analytic process is post-event reconstruction.