Legacy building systems leave organizations open to cyber attacks — and their costs: Honeywell

These systems include field devices and controllers, safety systems, HVAC and chillers, switchgears, elevators and fire panels, physical security systems, building management systems and connected IoT devices.

“OT security maturity is ultimately measured by whether organizations understand their attack surface, limit incident impact and restore operations quickly.”

Many building systems are vulnerable due to equipment operating under legacy BACnet standards.

Patches for vulnerabilities are slow to be implemented at many organizations because of the systems’ crucial role in building operations.

“A complete, continuously updated inventory is the starting point,” the Honeywell report says.