Companies face an increasing but under-recognised threat from cyber-attacks using connected devices, and facilities managers need to work with IT professionals to address the issue, research has warned.

New data from research and advisory firm Verdantix has highlighted how a sharp rise in the number of connected devices across building systems mean that the operational technology (OT) used to run facilities creates a growing risk of cyber-attack.

Connected OT networks are converging with their IT counterparts, blurring traditional lines of responsibility for cybersecurity, just as ageing building systems require replacement, and the number of attacks rises.

Without sufficient security controls, Verdantix warns, these systems are introducing significant new risks and more entry points for cyber criminals to exploit.

The past five years have seen a substantial increase of Internet of Things (IoT) sensors and smart devices deployed with firms frequently selecting these smart devices based on cost and functionality, resulting in facilities having many devices with poorly inbuilt cybersecurity controls.

Cyber-attacks aimed at IT systems cost businesses an estimated $945 billion in 2020 through damage to data and systems, lost productivity, and theft of money, intellectual property, and personal data, despite $145 billion in cybersecurity expenditure.

Verdantix’s Best Practices: Enhancing Your Smart Building Cybersecurity Programme found firms are not aware of the full extent of their risk exposure from their OT, as they often do not keep registers of connected devices, or the level of cybersecurity protection provided.

Compiled after interviews with experts from the cybersecurity, IT and building technology sectors, the report shows how companies can adapt. Its publication comes as more connected devices via the IoT transform the landscape, but just 32% of firms evaluate IoT security risks as part of the onboarding process for third parties and just 54% run penetration tests on their IoT devices.

Recommended

• UK leads Europe in open banking
• Clean Energy Accelerator offers startups £1.2m in grants for climate action
• Seven early-stage Scottish startups to watch

Rodolphe D’Arjuzon, Global Head of Research at Verdantix said: “The first step for rebooting a smart building cybersecurity strategy is defining clear responsibilities and embedding cyber management into facilities operations across procurement, technology management and staff training.

“Facilities managers should not develop a siloed cyber programme on their own, but rather partner with their IT and security peers to integrate cybersecurity into different building management processes.”

According to the latest 2022 Security Report from February, this year will mark a turning point in IoT security adoption.

Data suggested that the industry is committed to addressing the historic lag between the rate of digital transformation and the speed of securing the IoT ecosystem.

Researchers surveyed 1,038 tech decision makers across Europe, the US, and APAC, and found a positive turning point for IoT security within organisations and shifting attitudes, with businesses making concerted efforts to make the IoT more secure.

Get the latest news from DIGIT direct to your inbox

Our newsletter covers the latest technology and IT news from Scotland and beyond, as well as in-depth features and exclusive interviews with leading figures and rising stars.

To subscribe, click here.