Best Practices: Enhancing Your Smart Building Cyber Security Programme

On top of much-discussed IT cyber security risks, firms face growing cyber threats across their operational technology (OT), because of the explosion of networked devices, the convergence of IT and OT networks, and aging building systems. Despite this, the cyber security of building systems is frequently undermanaged, as firms lack clarity on where the responsibility for OT cyber security lies and are unaware of the full extent of risks they face. Drawing on our interviews with experts from the cyber security, IT and building technology sectors, this report sets out best practices for enhancing the cyber security management of building systems. The research finds that the first step for rebooting a smart building cyber security strategy is defining clear responsibilities and embedding cyber management into facilities operations across procurement, technology management and staff training.