A smart building is full of devices connected to the network. Thermostats, sensors, meters, cameras, access gates and EV chargers. That is exactly what makes it smart. But every device is also a door that needs to be locked.
1. Give building systems their own network
The most important step: put the building systems on their own, separate network. Apart from the tenants' network and apart from the guest WiFi. If something goes wrong somewhere, it stays there.
2. Change the default passwords
Many devices come with a default password. These are often simply available online. Change them during installation, and record who manages the new passwords.
3. Keep the software up to date
Smart devices also receive updates, often to close security holes. Agree with your suppliers who installs these updates, and how often.
4. Know what is connected
Make an overview of all devices on the network. What is it, where is it, who owns it, and who manages it? A device nobody knows about will not be secured either.
5. Agree who is responsible
In many buildings it is not clear who manages the building network. The owner, the installer or the tenant's IT department? Put it in writing. Then everyone knows who takes action when something goes wrong.
How the IT-Label helps
During an IT-Label audit we also look at the separation between networks and how they are managed. That way you can see at a glance whether the foundation is set up securely. Want to know more? Read about smart buildings and IoT.
