Building automation and physical security systems
Modern buildings run on networks: heating and cooling controllers, door readers, elevators and cameras. Many were installed by separate trades, sit on a flat network and still use default passwords. For a property manager, that is a risk to tenants as well as to the building.
What we do
- Building system inventory
- Network segmentation
- Contractor access controls
- Firmware review
- Camera retention rules
- Access log review
- Tenant network separation
Our team works with BACnet and the Niagara Framework, Siemens building automation, Genetec and Axis, and has experience with KNX. We map each system, move them to their own network segments, set up remote access with named accounts and log who opened what.
This group links to our Managed IT Services and to the physical security and OT security groups. These are tools our team has experience with, not partnerships.
Leading platforms we work with
- BACnet
- Tridium Niagara
- Siemens
- Genetec
- Axis Communications
- KNX
- Johnson Controls Metasys
- Schneider Electric EcoStruxure
- Brivo
Platforms and practices
- BACnet and BACnet/SC network design
- Building controller network segmentation
- Access control and badge systems
- Video management systems
- Remote access for contractors
- Default password and firmware review
- Elevator and HVAC network monitoring
- Tenant Wi-Fi separation
- Camera retention and export policies
References
Sources last checked .
Product names are trademarks of their owners and are listed to describe our experience; they do not imply endorsement or partnership.
How we use Building automation and physical security systems for clients
Managed IT Services
We run your IT day to day so it stays secure: help desk, devices, Microsoft 365, Exchange, Active Directory, backups, networks and monitoring.
Learn moreCybersecurity
We find out whether everything you run is safe from attackers, then we fix it.
Learn moreCyber Automation
Custom AI agents that do repetitive work around the clock, with human review where it matters.
Learn moreFrequently asked questions
Direct answers to the questions we hear most. Something else on your mind?
Send us a messageWhy separate building systems from the office network?
Controllers, door readers and cameras often have weak passwords and rarely get updates. On a shared network, a problem with one can spread to others. Separate segments with a firewall between them limit what an attacker can reach.
What is BACnet/SC?
BACnet Secure Connect is a version of the BACnet building protocol that uses encrypted, authenticated connections. Classic BACnet/IP does not authenticate senders. Older equipment may not support BACnet/SC, so we check each product and often use segmentation or a gateway in front of it.
How should contractors get remote access to the building systems?
Through one managed entry point, with a named account for each technician, multi-factor authentication, and access that is switched on for a job and off afterward. You should hold the logs of who connected, not only the vendor.
Will you take over our building control system?
No. We map the systems, segment the network, set up access paths and review vendor terms. The vendors who maintain the controls keep that job. We work with them so changes do not interrupt heating, cooling, doors or life-safety systems.