IT and building systems need a shared security conversation.

See the complete environment

Connected buildings contain technology with different purposes and lifecycles. A facilities workstation, a camera and a building controller may all use the network, but they cannot always be maintained in the same way. Start by identifying the assets and who is responsible for them.

Pay attention to supplier access

Remote access can be essential for maintenance. It needs clear ownership, appropriate authentication and an agreed process for enabling, reviewing and removing access. Avoid assuming that a supplier connection is being managed simply because the system is working.

Coordinate changes with operations

Security work on building systems needs input from the relevant specialists. Understand support constraints, service dependencies and operating requirements before making changes. Plan and validate changes with the teams accountable for the affected system.

Keep the conversation practical

Bring IT, facilities and specialist providers into a regular review. Track unknown assets, access changes, maintenance issues and recovery dependencies. Keep decisions, owners and follow-up actions visible. A shared operating model makes it easier to resolve gaps that sit between contracts.