The Building-Management and Controls Attack Surface
The building-management system is the most underestimated attack surface in the facility. It is trusted like plumbing and secured like an afterthought, yet it holds authority over cooling, power sequencing, access doors, and the alarms operators depend on. Its protocols were built for a walled garden and assume everyone on the wire is a friend. Its remote-access paths multiply with every vendor contract. Its gateways translate between networks and, in doing so, become bridges an attacker can walk. Do not think of the BMS as facilities equipment. Think of it as an unauthenticated command bus wired to the machinery that keeps your compute alive — and defend it accordingly, because whoever controls the building controls the compute.
Knowledge check
Why do the core protocols used by building-management systems represent an inherent attack surface, and what compensating control matters most?
Show the answer
Common building-control protocols were designed for trusted, closed networks and typically lack authentication and encryption, so any device that reaches the segment can issue trusted commands. The most important compensating control is strict network segmentation and monitored boundaries, since the protocols themselves cannot enforce identity.