登录查看更多内容

How do you manage BMS vendors and contractors for cyber accountability and quality?

由人工智能和领英社区提供技术支持

Building management systems (BMS) are essential for optimizing the performance, comfort, and security of smart buildings. However, they also pose significant cybersecurity risks if not managed properly. As a building owner or manager, you need to ensure that your BMS vendors and contractors are accountable and deliver quality services that meet your expectations and standards. Here are some tips on how to manage BMS vendors and contractors for cyber accountability and quality.

此文章中的业界达人

由社区从 2 条内容中精选。了解更多

1 Define your requirements

Before you hire any BMS vendor or contractor, you need to define your requirements clearly and communicate them effectively. This includes your goals, expectations, budget, timeline, scope, and deliverables. You also need to specify your cybersecurity requirements, such as the level of encryption, authentication, access control, monitoring, and reporting that you expect from your BMS vendor or contractor. You should also establish the roles and responsibilities of each party, the escalation procedures, and the penalties for non-compliance or breach.

添加您的观点

David Grieshaber

CIO | Elisium & Cognitive | cognitive net-zero sponge luxury resort city
举报内容
Clearly define your BMS cyber requirements (security standards, threat mitigation, response plans) and quality expectations (performance metrics, testing, documentation). Choose qualified vendors, incorporate requirements into contracts, and keep the lines of communication open. Build a cyber-strong and quality-focused BMS that protects your building, data, and delivers long-term value!

已翻译

赞

2 Evaluate their credentials

Once you have defined your requirements, you need to evaluate the credentials of your potential BMS vendors and contractors. This means checking their qualifications, certifications, experience, references, and reputation. You should also verify their cybersecurity capabilities, such as their security policies, procedures, audits, tests, and certifications. You can also ask them to demonstrate their BMS solutions and how they address your cybersecurity requirements. You should also review their contracts and agreements carefully and negotiate the terms and conditions that suit your needs and protect your interests.

添加您的观点

3 Monitor their performance

After you have hired your BMS vendor or contractor, you need to monitor their performance regularly and ensure that they deliver quality services that meet your requirements and standards. You should also verify that they comply with your cybersecurity requirements and follow the best practices for securing your BMS. You should also establish a feedback mechanism and a reporting system that allow you to track their progress, identify any issues or gaps, and resolve them promptly. You should also conduct periodic reviews and audits to evaluate their performance and satisfaction.

添加您的观点

4 Train your staff

Another important aspect of managing BMS vendors and contractors for cyber accountability and quality is training your staff. You need to ensure that your staff are aware of the cybersecurity risks and best practices for your BMS and that they follow the security policies and procedures that you have set. You should also provide them with the necessary skills and tools to operate, maintain, and troubleshoot your BMS effectively and efficiently. You should also encourage them to report any suspicious or abnormal activities or incidents to you or your BMS vendor or contractor.

添加您的观点

5 Update your BMS

Finally, you need to update your BMS regularly and keep it up to date with the latest technologies, standards, and regulations. You should also work with your BMS vendor or contractor to implement any upgrades, patches, or enhancements that improve the performance, functionality, and security of your BMS. You should also review your BMS requirements and expectations periodically and adjust them accordingly to meet your changing needs and goals. You should also seek feedback from your staff, tenants, and customers on how to improve your BMS and its cybersecurity.

添加您的观点

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Andrew Brooks

Managing Director at The HVAC Consultants Ltd
举报内容
The network infrastructure proposed by the BMS provider should be considered. Most will price a serial RS-485 style network, which will be difficult for you to manage or understand if it's secure. One of the most popular serial networks is BACnet MS/TP, this network is difficult to secure and often isn't secured at all. Ethernet is a much better choice with a large number of vendors of BMS controls offering Ethernet controllers at all levels, this will allow a better oversight of IT security. You should be prepared for an increase in cost as a result of requiring Ethernet, primarily due to the complexities of working with your own IT department and construction timetables often prove problematic.

已翻译

赞

Building Management Systems

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How do you manage BMS vendors and contractors for cyber accountability and quality?

1

2

3

4

5

6

1 Define your requirements

2 Evaluate their credentials

3 Monitor their performance

4 Train your staff

5 Update your BMS

6 Here’s what else to consider

Building Management Systems

给文章评分

感谢您的反馈

更多Building Management Systems相关文章

更多相关阅读内容