Sector
Building Automation
HVAC, lighting, access and fire systems — frequently the least segmented OT in an organisation.
bacnetbacnet-ipknxmodbus-tcp
Typical architecture
Supervisory controllers on a BAS VLAN, field controllers on MS/TP, contractor access via a controlled path.
At a glance
SystemsBAS supervisory controllers, VAV / AHU controllers, Access control, Fire panels, Lighting
VendorsJohnson Controls, Honeywell, Tridium, Siemens, Schneider Electric
Why should I care?
Sector context decides consequence. The same vulnerability carries a different risk in a substation, a treatment plant and a packaging line — prioritise on physical outcome, not CVSS alone.
Key processes
- Comfort control
- Energy optimisation
- Occupancy scheduling
- Life safety monitoring
Safety considerations
- Smoke control and life safety interfaces
- Environmental conditions for sensitive occupants
Availability requirements
- Comfort and energy impact; critical for labs and data halls
Threat patterns
- Internet-exposed controllers
- Contractor-managed systems
- No inventory or patching ownership