In part one of our CRE cybersecurity series we discussed the perceived risks associated with IoT and how it’s often thought to lead to compromised cybersecurity. The unfortunate reality is that disconnected buildings are often just as vulnerable to cyberattacks as their connected counterparts, as older buildings can contain units that are internet-active and unencrypted, all without the facilities management (FM) team’s knowledge. In addition, an older BMS can expose your portfolio to information leaks and cyberattacks if not updated to protect against the latest malware.
If you’re not sure how vulnerable your organization is to cyberattacks, the first step should be to execute a comprehensive site audit, including the building network, BMS, all sub-systems, and any IoT devices. Log all previous contractors that have had maintenance contracts and ensure you consistently capture the software they use and how they gain external access to your buildings. Unfortunately, it’s not uncommon for critical systems to be commissioned and deployed from contractor laptops with no handover or internal back up of those files. The audit should therefore include the manufacturer, model, firmware versions, points of external access, usernames, passwords and the locations of all system configuration files.
A comprehensive audit should conclude with a Data Commissioning Report, evaluating the performance of each connected device and sensor. A Data Commissioning Report provides a list of issues that need to be resolved by a controls or network vendor, as well as a summary of the building systems capable of being integrated into a smart building platform. Some common issues highlighted by a Data Commissioning Report include:
While cybersecurity risks are typically hidden in the underlying IT and OT systems, this report should complement your cybersecurity audit, providing a comprehensive list of your sensors, highlighting which are disconnected, miscalibrated or broken.
Completing a site audit will create a foundation for your cybersecurity strategy and further investment into a scalable smart building program. Contrary to what the headlines lead us to believe, embracing IoT technology is key to improving cybersecurity, when implemented correctly. Having discovered your portfolio’s cybersecurity weaknesses, you’ll then need to address them - find out how in part 3 of our CRE cybersecurity series.
5 articles found
Get to know our Switchers as we share our journeys in the smart building industry and what it’s like working at Switch!
With energy prices at a multi-decade high and increased societal pressure to lower carbon emissions, buildings must optimize their energy efficiency to stay relevant, stay profitable, and combat the global climate crisis. Can you afford the cost of inaction?
This document provides an overview of the Switch Platform’s integration with Microsoft Azure, helping our customers create actionable insights into site and portfolio performance.
The IoT intelligent building platform is changing the way facilities are operated and maintained to deliver greater cost and energy savings while maximizing occupant satisfaction
This white paper explores the meaning of the term “smart building,” and the value associated with investing in a smart building program. It presents best practices for creating a smart building program and utilizing connected, IoT technology across a portfolio.
This e-book explains why remote building analysis, reporting and control is essential during a global crisis. Receive practical advice on how to use smart building tech to adjust your operations, reducing operating and energy costs while still delivering a safe, comfortable tenant experience for essential workers.
The future of AI-powered buildings depends on something less exciting but far more important: clean, structured building data.
Most buildings aren't AI-ready — not because they lack technology, but because their data is siloed. Here's the foundation they're missing.
Learn how smart building automation helps Facility Managers reduce costs, gain portfolio visibility, and deliver measurable ROI in 2026.
Book a demo and see how Switch connects, analyzes, and optimizes your buildings from day one.
