A method, device and computer program product that monitor situations. The method includes: processing information indicative of an occurrence of events to detect, in response to a current rule set, an occurrence of at least one situation that belongs to a situation set; wherein at least one rule sub-set out of the rule set defines at least one relationship between events that should occur within a lifespan; receiving a request to update a first rule; updating the first rule to provide a first updated rule while continuing to detect an occurrence of situations not affected by the update of the first rule.