The Summit will bring together industry thought leaders to review the current status of cybersecurity in the BAS industry, discuss the impending release of BACnet/SC and other initiatives, and formulate an appropriate posture for the BAS industry in the security-conscious IT space.

3. Summit Agenda
●
●
● State of BAS Cybersecurity
● The Minds of IT Departments
● Impact of BACnet/SC
● Securing BAS, an Industry Imperative
●

4. New Deal for Buildings
Revisit the Relationship between BAS Vendors
and Building Owners/Operators
newdeal.blog

5. New Deal White Paper
Three Tenets

6. Facility IT
The
New Deal
Landscape
Systems
Services
Information
The Application of Information Technology to
Maximize the Value of Facilities for their
Owners & Occupants

7. Facility IT
Attack Surface

9. Glen
Allmendinger
Jim
Lee
Andy
McMillan
Dave
Bohlmann
Jim
Butler
Hans-Joerg
Schweinzer
Robert
Hemmerdinger
Carol
Lomonaco
Anto
Budiardjo

11. Glen’s Slides

13. 20041820
1926
1973
1983
Mechanical & Pneumatic Controls Security Through VPNs & VLANS
1999
2009
CISCO/Cimetrics
Begin IT Friendly Security Initiative
BACnet IT Working Group Founded
Arab Oil Embargo
Mini Computer
Control
BACnet IP
Annex J
BACnet International Founded
BACnet Manufacturer’s Association
BACnet
Addendum G
Started
Central
Heating
Air
Conditioning
Direct Digital
Control
2019
BACnet SC
Released
(Hopefully Summer 2019)
1995
2018
BACnet SC
Public Review
And Preliminary
Interoperability
Testing
2002
BTL Listing
Begins

14. Security Categories
Authentication: Users
Devices
Encryption
Authorization
Software updates to address vulnerabilities
Vulnerability Detection
Intrusion Detection
Network Management / Monitoring

16. Glen
Allmendinger
Jim
Lee
Andy
McMillan
Dave
Bohlmann
Jim
Butler
Hans-Joerg
Schweinzer
Robert
Hemmerdinger
Carol
Lomonaco
Anto
Budiardjo

18. Who are the IT guys?
● Historically
○
○
● Around 2003 and later
○
● 2010 to present
○
○

19. What do the IT guys want?
●
●
●
●
●

20. Why don’t the two groups see eye to eye?
●
●
●
●

21. Glen
Allmendinger
Jim
Lee
Andy
McMillan
Dave
Bohlmann
Jim
Butler
Hans-Joerg
Schweinzer
Robert
Hemmerdinger
Carol
Lomonaco
Anto
Budiardjo

23. Securing BACnet/IP Networks Today
●
●
○
○
23

24. BACnet/SC Overview
●
○
○
○
●
○
●
24

25. Security Categories
Addressed by BACnet/SC
Authentication: Users
Devices ✔
Encryption ✔
Authorization
Software updates to address vulnerabilities
Vulnerability Detection
Intrusion Detection
Network Management / Monitoring

26. BACnet/SC Deployment
●
○
●
○
●
26

27. BACnet/SC Timeline
●
●
●
●Third public review and plugfest expected in spring of 2019
27

28. Special Thanks to BACnet IT-WG Contributors
●
●
●
●
●
●
●
●
●
●
28

29. Cybersecurity Initiatives for Automation Systems
●
●
●
●

30. Glen
Allmendinger
Jim
Lee
Andy
McMillan
Dave
Bohlmann
Jim
Butler
Hans-Joerg
Schweinzer
Robert
Hemmerdinger
Carol
Lomonaco
Anto
Budiardjo

32. Key Elements of Success
●
○ more
○
●
○
○
●
●
●

34. EastWest

35. Suppliers
●
●
●
●
●

37. Owner/Operators
●
●
●
●
●

38. Glen
Allmendinger
Jim
Lee
Andy
McMillan
Dave
Bohlmann
Jim
Butler
Hans-Joerg
Schweinzer
Robert
Hemmerdinger
Carol
Lomonaco
Anto
Budiardjo

39. Continue on NewDeal.Blog and #FacilityIT