Managing Security Risks in Smart Lighting Systems, Part 1

Nov 5, 2019

This blog post is the first of a 4-part introductory series on managing security risks in smart lighting systems.

Building automation and control systems (BACS) monitor and control a range of building systems such as lighting, heating, air conditioning and more. The terms used for BACS are widespread — building management system, building automation system, smart building and more, depending on the scope of the system. A smart lighting system is a base building system that is an important, integral part of a BACS.  

At a fundamental level, every type of BACS facilitates the flow of information as well as automated control through connectivity. This flow of information is required to reduce operating costs and provide better and timely information about a building function or asset. BACS are a form of business information system (BIS) and, like any other BIS, can create potential security threats and risks to the business.

Navigant Research recently analyzed the implications of increased connectivity and concluded that building stakeholders, such as facility management professionals, need to take a proactive approach to cybersecurity threats.* They need to determine vulnerabilities and educate the enterprise even though security may not be their main focus area.

Let’s get started with some basics on smart lighting system security, and identify the needs and risks facility managers and operators should know about.

Multi-tier approach to security

The range of security threats and risks involving BACS is broad with examples including unauthorized access, denial of service to those that should have access, physical destruction of devices, and the loss or manipulation of data. BACS security should support a multi-tier approach that includes features implemented at the device, network and software levels within the system as well as implementing cybersecurity controls on an organization level.

Watch for more in upcoming issues.

Source: Osram

* Navigant Research, https://www.navigantresearch.com/reports/cybersecurity-will-define-market-leaders-in-the-intelligent-buildings-market