Patent ID: 7428723

Claim:
A method, executed at least one processor of a system, for aggregating events related to an enterprise comprising: receiving an event, wherein the event is related to one of a state change or a problem within the enterprise associated with at least one of an operation, function, policy, process or a component thereof related to the enterprise; analyzing the event; correlating the event to rules for processing the event, wherein correlation is based on the event; receiving a plurality of subsequent events; processing each of the subsequent events by: analyzing a subsequent event for a relationship with the event, wherein a relationship is based on the rules, and correlating the event and each of the subsequent events related to the event into a single bundle of events; incorporating the single bundle of events and other information related to the event into a work protocol based on the rules; analyzing the work protocol with the subsequent events based on the rules; and determining closure conditions based on the analysis of the subsequent events.