As connected devices become more prevalent and start invading office settings, security experts and building management will have to work together to ensure the smart office remains safe from malicious actors who could hack their way in. For key insights from the IBM X-Force security research team on penetration testing a building automation system, visit http://ibm.co/20GFbbh.

1. 29%Building Automation
System managers
who are improving
cybersecurity for their
systems3
A Back Door for Hackers?
Smart Buildings
Connected Building Systems Fly under the Cybersecurity
Radar, Creating “Shadow IoT”
For more information, visit ibm.com/security
Connected devices
in use in commercial
smart buildings1
206.2
MILLION
84%Building Automation
System managers
with internet-connected
systems2
DATA CENTER/
SERVER ROOM
ROUTER
INTERNET
BAS
CONTROLLER
“SMART”
SECURITY SYSTEM
COMPANY
NETWORK
SHARED
INTERNET
“SMART”
THERMOSTAT
SCENARIO:
OVERHEAT AND
CRASH SERVERS
RISK:
SHUTTING DOWN
SECURITY SYSTEM
RISK:
BACKDOOR TO
CORPORATE DATA
SOFTWARE
FLAWS
INSECURE
PASSWORDS
If your building automation system
(BAS) is connected to the internet:
Based on IBM Security analysis
of real-world Smart Building
automation systems
Securing Your
Smart Building
Smart Building Risks
UPDATE SOFTWARE REGULARLY
DO CYBERSECURITY TESTING
ON SYSTEM
DON’T CONNECT BAS TO SAME
WIFI AS COMPANY NETWORK
SET SECURE PASSWORDS ON
ALL DEVICES
INCLUDE BUILDING SYSTEMS IN
RISK MANAGEMENT PLAN
SOURCES:
1. Smart Cities Will Include 10 Billion Things by 2020; Gartner, 2015
2. Building Operating Management survey; FacilitiesNet, 2015
3. Building Operating Management survey; FacilitiesNet, 2015