This audio was created using Microsoft Azure Speech Services
Although estimates vary, businesses worldwide lose billions each year to cyber crime, according to a report by McAfee and the Center for Strategic and International Studies.
The modern building management system (BMS) connects to the Internet and is susceptible to intrusion. Unlike traditional, stand-alone systems, today’s intelligent building management systems (BMS) link through open protocols to IT data centers, remote access servers, and utilities.
While benefits far outweigh the risks, an integrated BMS can open an organization up to greater cybersecurity vulnerabilities.
Cybersecurity “best practices” to mitigate vulnerabilities
Commonsense measures can help to mitigate building management cybersecurity risks and any resulting financial losses. Recommended best practices include:
- Password management: Change default passwords before installing devices, make passwords more complex, and set up unique credentials for each site.
- Network management: Limit access to non-IP-based communication channels (including USB ports) and secure web interfaces from SQL injection Install firewalls and tighten physical security.
- User management: Grant users only the minimum amount of authority necessary to perform their jobs. This can help control any risks presented by unauthorized users or disgruntled employees.
- Software management: Apply software security patches as they become available, and limit deployment to authorized users.
- Vulnerability management: Develop a vulnerability management plan covering all types of risks and establish a formal document for each installation.
Hackers take the path of least resistance
The harder a system is to crack, the better the chances that it will be ignored by a would-be hacker. Following these best practices can make hacking a building system more difficult for cyber criminals.
Bolstering awareness of cybersecurity across an enterprise can also help guard against hackers. Not all employees can be experts in cybersecurity, but effective and regular cybersecurity training makes everyone aware of vulnerabilities and improves the chances of identifying and denying cyber attacks.
For more information, download our white paper, “Five Best Practices to Improve Building Management Systems (BMS) Cybersecurity,” and if you have questions or would like to discuss this topic, please leave a comment.
