登录查看更多内容

How do you integrate BMS with other security systems without compromising cybersecurity?

由人工智能和领英社区提供技术支持

Building management systems (BMS) are essential for optimizing the performance, comfort, and safety of buildings. However, they also need to communicate and integrate with other security systems, such as access control, CCTV, fire alarm, and intrusion detection. How do you ensure that this integration does not expose your BMS to cybersecurity risks, such as hacking, malware, or data breaches? In this article, we will discuss some best practices and solutions for securing your BMS and other security systems.

此文章中的业界达人

由社区从 7 条内容中精选。了解更多

1 Assess your current situation

The first step to integrate your BMS with other security systems without compromising cybersecurity is to assess your current situation. You need to identify the types, models, and versions of your BMS and security devices, as well as the network architecture, protocols, and interfaces they use. You also need to evaluate the level of security and compliance of your systems, and identify any gaps or vulnerabilities. This will help you to prioritize your actions and plan your integration strategy.

添加您的观点

Tom Held

CISSP | Senior Cyber Security Analyst | Web/Cloud Application Development | Web Application Security | SCADA / OT | DR / BCP
举报内容
A needs assessment should be primary. This will determine the level of integration needed between the BMS and other systems, and limit the exposure of the BMS system to external threats. For example, if data interchange is the only need, then a data server, sitting in a DMZ between the BMS and other systems would be prudent.

已翻译

赞

2 Choose compatible and secure devices

The second step is to choose compatible and secure devices for your BMS and security systems integration. You should look for devices that support open and standard protocols, such as BACnet, Modbus, or ONVIF, that allow interoperability and flexibility. You should also look for devices that have built-in security features, such as encryption, authentication, authorization, and firmware updates, that protect them from unauthorized access and tampering. You should avoid devices that use proprietary or outdated protocols, or that have known security flaws or backdoors.

添加您的观点

Tom Held

CISSP | Senior Cyber Security Analyst | Web/Cloud Application Development | Web Application Security | SCADA / OT | DR / BCP
举报内容
Care should be taken so that the BMS remains truly segmented away from other networks. In this way, protocols specific to the BMS remain on the BMS network, and potentially harmful protocols remain isolated from the BMS.

已翻译

赞

3 Implement network segmentation and isolation

The third step is to implement network segmentation and isolation for your BMS and security systems integration. This means that you should separate your BMS and security devices from other network devices, such as computers, printers, or servers, that may pose a threat or a distraction. You should also separate your BMS and security devices into different subnetworks, based on their functions, locations, or risk levels. This will limit the exposure and impact of a potential cyberattack, and allow you to apply different security policies and controls for each subnetwork.

添加您的观点

Gabriel Neuman

Transformando negocios con automatización e Inteligencia artificial.
举报内容
Secure your network with these practices: a) VLAN & Device Limitation: - Implement VLAN for segmentation. - Limit devices with direct internet access. b) Continuous Monitoring: - Regularly monitor for unusual activities. - Use monitoring tools for performance assessment. c) Robust Firewall: - Deploy a strong firewall for protection. - Keep rules and configurations updated. d) Establish SOC: - Build a Security Operations Center (SOC). - Equip with skilled professionals and advanced tools. Enhance security, resilience, and performance with these steps.

已翻译

赞

4 Apply encryption and authentication

The fourth step is to apply encryption and authentication for your BMS and security systems integration. Encryption is the process of transforming data into an unreadable format, so that only authorized parties can access it. Authentication is the process of verifying the identity and credentials of a user or a device, before granting access to data or resources. You should use encryption and authentication for both data in transit and data at rest, to prevent eavesdropping, interception, or manipulation. You should also use strong encryption algorithms and keys, and secure authentication methods and protocols.

添加您的观点

Tom Held

CISSP | Senior Cyber Security Analyst | Web/Cloud Application Development | Web Application Security | SCADA / OT | DR / BCP
举报内容
Encryption and authentication should be implemented with care, keeping in mind that, in the CIA triad, Availability is most often the top priority, not confidentiality, as with most other IT systems. Also keep in mind that authentication is far more important, in preventing harmful commands being sent to distributed controllers. Encryption is not as much of a concern.

已翻译

赞
Daniel Shepard

Control System Cybersecurity Department Manager
举报内容
There can be some significant challenges with implementing encryption on a BMS in relation to the field devices downstream. Careful consideration must be taken into account to understand the overhead associated with implementing encryption and that the downstream devices are not in many cases capable of implementing encryption. There are also compensating measures that can be implemented to reduce the need for encryption.

已翻译

赞

5 Monitor and update your systems

The fifth step is to monitor and update your systems regularly. Monitoring is the process of collecting and analyzing data from your BMS and security devices, such as logs, alerts, or performance indicators. Updating is the process of installing patches, fixes, or upgrades to your BMS and security devices, to address bugs, vulnerabilities, or new features. You should monitor and update your systems regularly, to detect and respond to any anomalies, incidents, or threats, and to maintain the functionality and security of your systems.

添加您的观点

Tom Held

CISSP | Senior Cyber Security Analyst | Web/Cloud Application Development | Web Application Security | SCADA / OT | DR / BCP
举报内容
Updates are often difficult or not allowed, due to compatibility issues. Implementing an update that addresses a security issue, but brings down the BMS system, or one of its segments, is not a prudent path.

已翻译

赞

6 Train and educate your staff

The sixth and final step is to train and educate your staff on the best practices and solutions for integrating your BMS with other security systems without compromising cybersecurity. Your staff are the first line of defense and the last line of response in case of a cyberattack. You should train and educate them on how to use, manage, and secure your BMS and security systems, and how to recognize and report any suspicious or malicious activities. You should also create and enforce clear and consistent policies and procedures for your staff, and conduct regular audits and reviews.

添加您的观点

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Tom Held

CISSP | Senior Cyber Security Analyst | Web/Cloud Application Development | Web Application Security | SCADA / OT | DR / BCP
举报内容
One must always keep in mind that BMS systems, along with other DCS, SCADA, and ICS are inherently very different environments, and the approach must be specific to this environment.

已翻译

赞

Building Management Systems

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How do you integrate BMS with other security systems without compromising cybersecurity?

1

2

3

4

5

6

7

1 Assess your current situation

2 Choose compatible and secure devices

3 Implement network segmentation and isolation

4 Apply encryption and authentication

5 Monitor and update your systems

6 Train and educate your staff

7 Here’s what else to consider

Building Management Systems

给文章评分

感谢您的反馈

更多Building Management Systems相关文章

更多相关阅读内容