In the works
Cyber security for connected building equipment.
A building management system means controllers, gateways and sensors on the building network — often with nobody holding the full list of what is installed, or of what is reachable from outside. Tropic Sécurité aims to give that visibility to the engineering firm and the operator, at design stage and on existing stock.
What is planned
The list of controllers, gateways and supervisors on an installation, with their protocols (BACnet/IP, Modbus TCP, KNX), firmware versions and network placement.
Technical network segmentation, internet exposure, default accounts, maintainer remote access: each check reviewed in turn, with its criticality.
For each point, the wording to carry into the design stage. The aim is not to design the building's cyber security, but to make sure the question was asked and recorded.
A controller installed today will run for fifteen years. Open points carried from one campaign to the next, and reminders for the update windows set in the maintenance contract.
In the meantime, the subject is covered in detail in our guide.