U.S. water systems are facing cyber threats aimed at programmable logic controllers and other operational technology used to monitor and control physical processes. Facilities Dive reported this week on campaigns involving threat groups suspected of links to Iran.
What Is Changing
Programmable controllers are common far beyond water utilities. Similar technology is used in manufacturing plants, central utility plants, building automation, pumping systems and other facility infrastructure.
Why It Matters to Facility Managers
The danger is different from a typical office-computer breach because operational technology can control real equipment. Unauthorized access could affect pumps, valves, temperatures, alarms or other physical processes.
Operational Impact
Facility managers should know which building and industrial-control devices can be reached from outside the facility and who is responsible for updating them. Old controllers may remain in service for decades, and equipment installed before modern cybersecurity requirements can be difficult to patch.
What Facility Teams Should Consider
The attacks reinforce the need for cooperation between facility and IT departments. Building controls can no longer be treated as isolated mechanical equipment simply because they operate HVAC, water or electrical systems. Network architecture, passwords, remote access and software updates are now part of maintaining the physical plant.
Facility Management Takeaway
The attacks reinforce the need for cooperation between facility and IT departments. Building controls can no longer be treated as isolated mechanical equipment simply because they operate HVAC, water or electrical systems. Network architecture, passwords, remote access and software updates are now part of maintaining the physical plant. The important step is to evaluate the development against the building’s actual operating needs, existing equipment and long-term capital plan. Facility decisions work best when maintenance, energy, safety, finance and occupant needs are considered together rather than as separate projects.
Facility managers should document the current condition before making a major change. Baseline utility use, maintenance history, failure records, occupant complaints and equipment age provide a way to measure whether a new program or technology actually improves performance after implementation.
Implementation also deserves as much attention as selection. New systems can create training requirements, software subscriptions, spare-parts needs and new relationships with vendors. Those operating costs should be included when comparing alternatives, especially when equipment is expected to remain in service for many years.
The strongest facility programs turn new information into a practical action: inspect an asset, update a plan, test a system, revise a specification or collect better data. Not every industry development requires an immediate capital project, but understanding the trend helps managers avoid being surprised when it reaches their buildings.
Before changing a building standard, facility teams should also confirm code requirements, warranty conditions and the effect on connected systems. A change that improves one part of a facility can create unexpected consequences elsewhere if controls, electrical capacity, ventilation, emergency procedures or staffing are not reviewed at the same time.
Before changing a building standard, facility teams should also confirm code requirements, warranty conditions and the effect on connected systems. A change that improves one part of a facility can create unexpected consequences elsewhere if controls, electrical capacity, ventilation, emergency procedures or staffing are not reviewed at the same time.
Before changing a building standard, facility teams should also confirm code requirements, warranty conditions and the effect on connected systems. A change that improves one part of a facility can create unexpected consequences elsewhere if controls, electrical capacity, ventilation, emergency procedures or staffing are not reviewed at the same time.
Before changing a building standard, facility teams should also confirm code requirements, warranty conditions and the effect on connected systems. A change that improves one part of a facility can create unexpected consequences elsewhere if controls, electrical capacity, ventilation, emergency procedures or staffing are not reviewed at the same time.
Source: Facilities Dive. iBidElectric facility-management news summary based on current publicly available reporting.
Add comment