Like any digital asset, BMS devices may have cyber and physical vulnerabilities due to management, automation, field device operation, and communication shortfalls.
Here’s what contributes to BMS vulnerabilities:
Aging technology. Many building systems comprise legacy technology with default credentials that are easy to guess and susceptible to simple attacks. Open ports that can’t be blocked without retrofit or major upgrades and technology that can’t be changed or patched are some common features of aging technology. Close monitoring, fine-tuning, and updating legacy BMS devices are all critical to mitigating cyber risks.
Physical security gaps. Unlocked PLCs and open control cabinets are examples of security deficiencies that lead to BMS vulnerabilities. Facility managers must ensure that controllers, workstations, and BMS field devices comply with operational technology (OT) security best practices.
Building management system vulnerabilities enable attackers to inject malware or sabotage devices, which can be used to access other critical parts of your network and cause operational disruption and unplanned downtime. The Armis platform empowers teams with full visibility into BMS and contextual insights into other assets in your environment to minimize those cybersecurity risks.