Hey folks, Phil Zito here and welcome back. In the past two posts, we've been diving very deep into how to secure your building automation system. In this post, we are going to kind of take what we've covered so far, and we're going to add a little bit of color to it. However, we're mainly going to focus in on BAS attack methods.

Hey folks, Phil Zito here and welcome back. In this post, we're going to continue discussing how to secure your building automation system and we are going to be looking at a couple different things. In the previous post, we went through fundamentals, cybersecurity, talked about a couple things related to cybersecurity risks, risk assessments, controls, etc. Now we're going to look at cybersecurity capabilities of a BAS, we are going to look at and discuss the limitations of cybersecurity controls, and we're going to look at the human aspects of cybersecurity.

Hey folks, Phil Zito here and welcome back. In this post, we are going to start a 3-part series on how to secure your building automation system. So, in this post, we are going to explore potential threats to building automation systems, how to assess risk, and common cybersecurity controls. This is mainly going to be a conceptual post and then the next two posts, we're going to get a little bit more hands-on, with the third post being very hands on. Be sure to read all 3 posts because if you skip this post, you won't understand most of the concepts. So, definitely don't skip this post.

I just finished reading two interesting articles about hacking BAS systems and thought I would share my thoughts with all of you on how a BAS could be used to hack a building. First off, we still have some educating to do around BAS as a whole in the industry. Reading through Brian Prince's article at Dark Reading titled Google Building Management System Hack Highlights SCADA Security Challenges brings to mind one of the first areas in which we need to educate our IT counterparts.