Smart Buildings Need to Secure IT Asset Systems

MISSISSAUGA, Ontario -- To address the security challenges presented by smart buildings, Schneider Electric has launched Cybersecurity Solutions for Buildings, to help secure building management systems that protect people, assets and operations.

The joint solution with Claroty, a security company for cyber-physical systems across industrial, healthcare, and commercial environments, is designed to identify all facility-wide assets, deliver unmatched risk and vulnerability management capabilities, and provide continuous threat monitoring to protect enterprise investments.

Fifty percent of today’s buildings are likely to still be in use by 2050. This is driving commercial buildings to digitize their assets, including modernizing their building management system. In fact, IoT technology for buildings is expected to grow from an existing 1.7 billion connected devices at the end of 2020 to over 3 billion by 2025. As these commercial buildings evolve into smart buildings of the future, they share at least one common trait: heightened exposure to risks.

The sector must address the security challenges presented by smart buildings. Studies have shown that 57 per cent of IoT devices are vulnerable to medium or high-severity attacks. Cyberattacks have already harmed several businesses, including critical infrastructure such as hospitals, data centers, and hotels.

The commercial building sector must find ways to safeguard both its access to the company’s IT systems as well as its mission-critical infrastructure.

“The integration of IoT in buildings is sparking an exciting shift across the sector, but like with any innovation, it also presents new risks,” said Annick Villeneuve, Vice President Digital Enterprise Solutions, Schneider Electric. “For threat actors looking to disrupt operations, benefit financially and/or achieve other objectives, and in so doing to put individuals at risk, buildings can appear to be the perfect target. It is with this in mind that we are partnering with Claroty to bring our customers a comprehensive, industry-leading solution that meets the unique security and operational risks facing buildings of today and of the future.”

As more and more IoT devices are deployed within the buildings space and increased connectivity between previously isolated operational technology, building management systems (BMS), and their IT counterparts, have made them attractive targets and vulnerable to cyberattacks. Additionally, facility managers oversee hundreds of vendors, service contractors, and technicians in a fragmented manner, increasing complexity and risk.0

“When it comes to securing cyber-physical systems, including BMS, the number one priority is to keep physical processes operational and safe,” said Keith Carter, Vice President of Worldwide Channels and Alliances, Claroty. “By fusing Claroty’s deep domain expertise and purpose-built technology with Schneider Electric’s renowned services and commitment to driving digital transformation globally, we are empowering our customers to reap the benefits of smart building technologies without increasing their exposure to cyber risk, thereby taking a profound step toward creating a more efficient, sustainable future for the world.”

The Cybersecurity Solutions for Buildings offer includes the following steps: asset discovery, risk assessment, remote access control, threat detection and response. It will give building owners, facility operators and security teams a simple solution without adding further workload which identifies baseline risks, continually reduces both cyber and asset risks, and identifies and remediates threats in their environment before services are interrupted.

Key capabilities include the following:

• Equips facility managers with a simple, vendor agnostic solution with which they can easily fulfill secure remote access, asset inventory, efficiency, and other related requirements from building owners and asset managers.
• Provides an automated asset discovery and network mapping solution that identifies and catalogs all system assets (BMS, IoT, UPS, Power Systems, etc.).
• Delivers a continuous threat detection solution that constantly monitors buildings networks to identify, assess, and alert at the earliest indicators of network and asset level anomalies.
• Allows vendors of smart building assets and systems to create external, secure tunnels to connect to and maintain specific resources and assets in the building network easily and without introducing additional risk.
• Provides dashboards and reporting capabilities to enable management and security teams to understand current situations, receive tailored recommendations, and drive the proper actions to reduce a building’s exposure to safety, operational, financial, and reputational risks.
• Delivers the industry’s only secure remote access (SRA) solution that is purpose-built for buildings and OT environments to increase building security when vendors, contractors, and technicians are performing remote maintenance activities.

Additionally, the valuable visibility and intelligence gained on the building OT and Asset Environment through the deployment of Schneider Electric’s Cybersecurity for Buildings solutions can also bring additional benefits to the building owners and operators to enhance their building operational efficiency and productivity with actionable insights.

To learn more please visit www.se.com/cybersecurity-services