Topic
This article explains how the timing of Everbridge Risk Intelligence alerts is determined, why alerts may sometimes be received later than expected, and how customers can optimize their configurations and engage Everbridge when they suspect significant delays.
Description
Everbridge Risk Intelligence alerts are influenced by when signals about an incident become available, how they are verified, and how they are processed by the Everbridge Risk Intelligence Monitoring Center (RIMC) and associated tools.
Detection and issuance of a risk alert depend on when source coverage about the incident becomes available and when Everbridge’s collection tools detect signals from those sources. Event detection can be impacted by the timing of initial signals received by the analysis team. If a signal comes significantly after an incident has occurred and no active risks remain, the team may not create a formal event. The Risk Intelligence Monitoring Center evaluates potential events based on current disruptions and risks. If an event is no longer active or poses minimal ongoing threat when detected, the team may choose not to create a formal event in the system.
Time discrepancies between the start of an incident and the time an alert is received can occur for several reasons. Different time zone representations, such as UTC versus local time, can contribute to perceived discrepancies. Additional time is required to verify and process event information. Everbridge aims to publish risk events approximately 1 hour after the initial incident starts, taking time to confirm and categorize the event accurately. Standard reporting windows guide analysts, but they are not absolute cutoffs. Analysts are trained to report events that still provide value even if reported late, but delayed reports may not always be published in Visual Command Center (VCC) in the same way as timely reports.
Delays in emergency alerts can also occur due to the internal intelligence verification process. All information must be vetted and verified before sending out an alert, which can cause a slight delay. Potential analyst oversight in processing and distributing time-sensitive information can also affect timeliness. Everbridge continually works to improve sources and detection methods to capture events more quickly and accurately. The team is working to expand reporting windows and evaluate AI-generated risk events to increase the publication of incidents that are reported with a delay. For information about auto-published, AI-powered Risk Events, see the EBS: Auto-Published Risk Events User Guide.
Everbridge has a quality assurance process to address content discrepancies in alerts. This process includes reviewing alerts with analysts to reinforce accuracy in event reporting, training teams to apply careful language in fast-moving situations, ensuring confidence levels in information are clearly communicated, and providing a direct feedback channel for immediate clarification on alert details. Customers can contact the Risk Intelligence Monitoring Center using the feedback channel rimc.feedback@everbridge.com when they need clarification on alert details.
To improve alert timeliness on the customer side, several configuration and process steps are recommended. Customers should review and modify current alert settings to ensure they capture a wide range of risk events. Customers can work with their account manager to understand the alert transmission process. It is also important to verify the sources of risk intelligence feeds and their typical reporting timelines. Customers may consider setting up multiple alert channels to increase the likelihood of receiving critical information promptly.
When customers experience what they believe to be significant delays in receiving critical alerts, it is recommended to follow up with the support team. Customers should gather details about the event and alert timing when engaging support, such as the nature of the delay and the impact on operations. Support can work with the appropriate teams to review whether timing was affected by verification requirements, the availability of source coverage, analyst processing, or other factors such as the timing of initial signals and the current status of the incident when it was detected.
Everbridge provides additional Risk Intelligence resources in the Support Center. For an overview of how Risk Intelligence content is organized, including reports, updates, and notifications, see the Risk Intelligence Overview.