Cybersecurity for smart buildings and building technology

Building technology systems such as sensors, door controls and photovoltaic systems have long been part of networked infrastructures. However, it is often underestimated that a building contains very different lifecycles: while the building envelope lasts for decades, the technical infrastructure is usually significantly younger. The IT infrastructure? Younger still. The associated IT security even more so. It is subject to a lifecycle of just a few weeks to months. This discrepancy poses a major challenge. Rapid technological change takes place between planning and operation. This is where cybersecurity vulnerabilities arise: unsecured access, unclear responsibilities, missing updates or a lack of transparency make buildings easy prey for cyberattacks. After all, attackers are also rapidly developing their methods further.

The consequences of an attack range from operational disruptions to life-threatening scenarios – for example, if cooling systems in hospitals fail. Attackers deliberately exploit such vulnerabilities. Simulated attacks in Switzerland have shown that unprotected systems can be compromised in just a few minutes. Comprehensive and holistically integrated cybersecurity measures are therefore essential and can be implemented very easily.

Seven steps to greater security in building technology

To ensure that innovative building technology does not become a ‘smart attack vector’, concrete measures are needed – so that cybercriminals cannot use this technology as a gateway to penetrate the network:

Inventory & visualisation
Network security and cybersecurity protection measures
Access management
Updates & patch management
Awareness-raising & responsibilities
Red teaming & penetration tests

The conclusion drawn by Martin Gartmann, CEO at UMB AG from our network, is clear: without cybersecurity, buildings are neither sustainable nor resilient. It must be considered right from the start. Pragmatic solutions, accountability and a lived security culture are crucial.

Manuel Häfliger, Group CISO of BKW, also emphasises the central role of cybersecurity: “At BKW, cybersecurity is a top priority in building technology and is taken into account from the very beginning for all products – from the supply chain through to operational use and its lifecycle. Group Security ensures across the Group that cybersecurity is implemented and enforced holistically – also in the services and products provided by BKW companies. Through targeted measures, such as regular security tests, vulnerabilities are identified and remedied at an early stage, and attack surfaces are reduced. In this way, we create trust in our products and services and strengthen the resilience of the entire BKW Group.”

Interested?

Would you like to know how secure your building technology really is? The experts at UMB will help you identify vulnerabilities and make your infrastructure fit for the future.

Expert network

As an installation and technology provider, BKW Building Solutions, with its expert network, is able to supply customers with solutions and components that are coordinated, customised, compatible with one another and continuously expandable. With this approach, future trends and changing needs are no obstacle to a successful transition to an environmentally friendly future.

News & Stories