Posts Tagged ‘BMS cybersecurity’
EU NIS2 Directive and Implications for BAS-BMS Cybersecurity
The EU NIS2 Directive (Network and Information Security 2 Directive), which replaces the original NIS Directive, aims to strengthen cybersecurity requirements across critical sectors, including energy, healthcare, transportation, and digital infrastructure. While not explicitly focused on building automation systems (BAS), its implications for such systems are significant, particularly for facilities considered critical infrastructure. Key Implications…
Read MoreCybersecurity Insurance for Buildings, BAS, BMS
Building owners should have cybersecurity insurance for their building automation systems (BAS) due to the increasing risk of cyberattacks on connected infrastructure. Key Reasons for BAS/BMS Cybersecurity Insurance Protection Against Financial Loss: A cyberattack on BAS can result in significant financial losses from system downtime, operational disruptions, or damaged equipment. Cybersecurity insurance can cover the…
Read MoreBuilding Automation Endpoint Protection Is Critical for Cybersecurity
Building automation systems (BAS), now highly-connected to the internet, have transformed how the infrastructure of residential, commercial, and industrial properties is managed and optimized. From heating, ventilation, and air conditioning (HVAC) systems to lighting, security, life safety, and power distribution, these systems are now smart, centralized, and increasingly automated. While this level of convenience and…
Read MoreImproving BACnet Secure Connect (BACnet/SC) Deployment with Automated Certificate Management
Managing BACnet Secure Connect (BACnet/SC) certificates can be a challenging task, especially for large buildings. Just recently at the AHR Expo 2024, we learned of a project that had over 300 devices and the decision was made to use 10-year certificates due to the multiple days (3-4) of labor needed to deploy BACnet/SC certificates. The…
Read MoreCybersecurity threats to hospitals and healthcare facility building management systems
A recent cyberattack forced a healthcare organization to cancel non-emergency surgeries and send some emergency patients to other facilities. In another attack, a hospital took it’s critical systems offline, impacting patient safety, requiring less efficient care methods, which also increased labor demands. It’s still impacted two years later. Cyberattacks on hospital and healthcare facilities increased…
Read MoreApplying Zero Trust to OT Networks For Smart Buildings
In December 2021, a ransomware attack locked a BAS firm and its building client out of the system, taking out 75% of smart building OT. Using device-level SaaS security in a NIST-compliant Zero Trust framework, BAS vendors can prevent smart building breaches. SaaS security for OT devices uses device-level identification and authentication, with no direct device access…
Read MoreCybersecurity to the Edge for Smart Building Infrastructure
This video is part of a webinar presented by KMC Controls, Veridify Security, and Arrow Intelligent Solutions regarding cybersecurity for smart buildings. A fundamental challenge to securing smart buildings, or any building large enough to have a building automation system, is how to protect devices so that they reject cyber attacks in real-time. Rejecting a…
Read MoreAccess Control Systems Vulnerable to Cyber Attacks
At the recent Black Hat security conference some researchers presented vulnerabilities to access control systems that enabled them to remotely lock and unlock doors just like you see in the movies, and even blocked the access from being logged. Separately, as part of a wider cyber attack on RuTube, Russia’s competitor to YouTube, employee access…
Read MoreRealcomm / IBCon 2022 Event Preview – Veridify Cybersecurity for Buildings
Veridify Security will be exhibiting at the joint event for Realcomm and IBcon in Orlando from June 14-16, 2022 in booth 711 within the Cybersecurity showcase. Realcomm – @ the intersection of Commercial and Corporate Real Estate, Technology, Automation and Innovation IBCon – The Smart, Connected, High Performance Intelligent Building Conference Verdify will be exhibiting…
Read MoreCyberattacks Shut Down Building Automation Systems
An article from Dark Reading in December 2021 highlights a cyber attack in Germany which caused a lock out from hundreds of building automation devices. “A building automation engineering firm experienced a nightmare scenario: It suddenly lost contact with hundreds of its building automation system (BAS) devices — light switches, motion detectors, shutter controllers, and…
Read More