SECURITY
SECURING SMART BUILDINGS
The increasing integration of smart building technologies, driven by artificial intelligence (AI), presents both operational efficiencies and significant cybersecurity risks. This was the core message delivered during a crucial panel discussion at Integrated Systems Europe (ISE) 2025.
Supported by Hikvision, under the banner ‘Empowering People for a Safer Digital Future,’ the panel focused on the practical cybersecurity challenges faced by those responsible for building systems, access control, and network infrastructure. The event drew a diverse audience seeking actionable strategies to protect their facilities.
Moderated by Shaun Reardon, Principal Cyber Security Consultant at DNV AS, the panel featured experts with direct insights into the security of interconnected systems. Chuck Davis, VP of Information Security at Hikvision, emphasised the practical application of cybersecurity principles to physical security systems, highlighting the need for ‘cyber citizens’ within facilities management teams to understand and mitigate risks.
Irene Kaggwa, GIGA Program Manager at the International Telecommunications Union (ITU), while focused on global connectivity, provided insights directly applicable to large-scale facilities projects and network deployments within campuses or multiple buildings, especially regarding infrastructure planning and security funding. Cybersecurity Expert Javvad Malik, Lead Security Awareness Advocate KnowBe4, stressed the critical need for secure access control, data protection, and network segmentation within facilities that handle sensitive information, directly translating his financial sector focus to the practicalities of building security. Juan Soler, AI Security Engineer, NeuralTrust, with his expertise in AI and data analysis, highlighted the dual-edged nature of AI in facilities management: improving building automation and security while introducing new vulnerabilities.
The discussion centred on the tangible cybersecurity threats facing modern facilities. The panel explored how interconnected building management systems (BMS), access control, HVAC, and security cameras create potential entry points for cyberattacks. The financial and reputational consequences of data breaches within facilities, including the compromise of tenant data, security footage, or building operational information, were discussed at length.
The potential of AI for predictive maintenance, anomaly detection, and enhanced security monitoring was balanced with the risks of AI-driven attacks targeting building systems. The need for layered security, including both physical and digital measures, was stressed, along with the importance of network segmentation to limit the spread of attacks and keeping firmware updated to patch known security vulnerabilities.
Key topics included securing IoT devices and building automation systems, implementing robust access control and video surveillance systems, managing the
40
cybersecurity risks of remote access to building systems, developing incident response plans for cyberattacks on facilities infrastructure, and training staff on cybersecurity best practices.
Facilities managers are on the front lines of cybersecurity, responsible for protecting critical infrastructure and ensuring the safety of building occupants. The increasing reliance on interconnected systems makes them prime targets for cyberattacks, which can result in disruption of building operations, compromised security and safety, financial losses due to downtime and recovery costs, and damage to reputation and tenant trust.
Several solutions were proposed to address these challenges. Implementing a layered security approach, combining physical security, network segmentation, and robust access controls, was deemed essential. Regularly updating firmware and software to patch vulnerabilities in building systems and IoT devices was also highlighted.
Conducting regular security audits and penetration testing to identify and address weaknesses in facilities infrastructure, as well as developing and implementing incident response plans to effectively respond to cyberattacks and minimize disruption, were recommended. Providing cybersecurity training for facilities staff to raise awareness of potential threats and best practices, mapping out all connected devices to understand the attack surface, and implementing strong password policies and multi-factor authentication were also seen as crucial steps.
The panel emphasised the need for continuous vigilance and adaptation to the evolving threat landscape. Facilities managers must embrace a proactive approach to cybersecurity, investing in training, technology, and partnerships to safeguard their infrastructure.
The ISE 2025 cybersecurity panel provided valuable insights for facilities managers, highlighting the critical importance of integrating cybersecurity into all aspects of building operations. Empowering staff with cybersecurity knowledge and implementing robust security measures are essential for ensuring a safe and secure digital future for facilities.
Further reading on this topic can be found on the Hikvision Cybersecurity web page, exploring threats, governance, training and best proactive recommendations.
www.hikvision.com/europe/support/ cybersecurity/cybersecurity-white-paper
TOMORROW’S HEALTH & SAFETY YEARBOOK 2025/26
WWW.TOMORROWSHS.COM
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46 |
Page 47 |
Page 48
