T02 - Stronger Cybersecurity for Building Automation Systems

Primary Presenter(s)

• 

  Fred Gordy

This session examines robust data sets from hundreds of building automation system cybersecurity audits in the United States and Canada using NIST and Building Control System Cyber Assessment Methods and Procedures—or BSC-CAMP—processes. The presenter will identify common vulnerabilities, share real-world examples of breaches, and provide actionable takeaways that can be immediately applied to mitigate future cyber risk and increase organizational resilience.

Learning Objectives:

• Explain NIST and BSC-CAMP approaches to information gathering during the pre-assessment phase of an audit.
• Discuss the next steps in an audit including interviews, configuration analysis, visual inspections, and more.
• Give examples of real-world cyber attacks.
• Learn how to effectively ensure device/configuration security throughout an organization.