IT Cyber Security

1. August 16-18, 2017
HRAI 2017 Annual Meeting &
Conference
Québec City, PQ
Intelligent Buildings –
IoT, Cybersecurity & Zero Net
Energy

2. Page 2
About CABA
The Continental Automated Buildings Association (CABA)
is a leading international, not-for-profit, industry organization
that promotes advanced technologies in homes and buildings.
Vision
CABA advances the connected home and intelligent buildings
sectors.
Mission
CABA enables organizations and individuals to make informed
decisions about the integration of technology, ecosystems and
connected lifestyles in homes and buildings.

3. CABA extends its reach to a Global Market
with 360+ members and 28,000+ industry
professionals worldwide.
AUSTRALIA
BARBADOS
BELGIUM
BRAZIL
CANADA
CHINA
COLUMBIA
CROATIA
ENGLAND
ESTONIA
FINLAND
FRANCE
GERMANY
INDIA
ITALY
JAPAN
KOREA
MEXICO
PANAMA
POLAND
RUSSIA
SINGAPORE
SOUTH KOREA
TAIWAN
THE
NETHERLANDS
UNITED
ARAB EMIRATES
UNITED KINGDOM
USA
VENEZUELA
Page 3

4. CABA Board of Directors
*To be Appointed
Page 4

5. Smart Buildings
Network. Intelligent. Adaptable.
Page 5

6. The Architecture of a Building
Automation System (BAS)
Page 6

7. What is an Intelligent Building?
Source: Compass Intelligence, 2015
Page 7

8. Intelligent Buildings and The Impact of
the Internet of Things Report Funders
Page 8

9. The History of the Term “ Internet of Things”
Page 9

10. Internet of Things Hierarchy
Page 10

11. Sensors…Everywhere and in Everything
Page 11

12. What is All This Stuff Going
Page 12

13. Decision Maker Survey Summary
Analysis
Page 13
Table ES.1
Most attractive
advantages that IoT in
building automation can
bring
Total Industrial
N on
Industrial Auto H igh Auto M ed Auto Low
Reduce energyconsum ption 7.9 8.7 7.6 8.8 5.5 10.0
Im prove operationalefficiency 4.5 4.9 4.4 4.1 3.9 5.4
Enable predictive m aintenance 3.7 3.1 4.0 3.1 4.2 3.2
Im prove financialplanning 10.0 10.0 10.0 10.0 10.0 8.2
Provide rem ote access 0.4 - 0.6 0.8 0.5 0.7
Future proof - 0.3 - 0.5 0.1 0.4
Increased use ofsensors 0.4 0.3 0.5 3.2 - -
O pen standards 1.7 2.2 1.6 1.0 2.8 0.6
Increase building perform ance data 3.9 4.5 3.8 6.6 3.7 2.4
Im prove occupantcom fort 1.0 1.2 1.0 1.0 0.6 2.2
Im prove occupantsafety 0.1 0.4 0.1 - 0.3 0.9
Im prove tenant/em ployee productivity 2.0 3.7 1.5 1.7 1.7 3.0
Increase building resiliency 2.1 0.9 2.5 4.2 2.1 1.0
Allrespondents,n=150 Source:IH S M arkit

14. Intelligent Building Roadmap &
Recommendations
Page 14
Source:IH S M arkit © 2016 IH S M arkit
Figure ES.5 IntelligentBuilding Roadm ap -Em bracing IoT in IntelligentBuildings
Full Concept
Em bracing IoT
High Autom ation
Medium
Low Autom ation
Realizing Value of
IoT
Data Security &
Storage
Ecosystem
Standarization
BusinessProcesses
Applications &
Segm entations
- Physical Security
- Energy/Utility
Managem ent
- HVAC
- Video
- Lighting
- Hazard
Detection / Fire &
Life Safety
- Environm ental
Health & Safety

15. Decision Maker Survey Summary
Analysis
Page 15

16. Key Trends in IoT and Commercial
Building Technology Markets
Page 16
• Near-term effects of the sluggish global macroeconomic environment due to a slow
housing market and constrained CapEx
• Development of appropriate business models (for each market subsector)
• Consumer acceptance and decreasing costs of connected devices
• IPV6 implementation
• Long-term evolution (LTE network upgrades)
• Advances in processor technologies.
Source:IH S M arkit © 2016 IH S M arkit
Figure ES.3 O verallD evelopm entofIoT D evices

17. Key Trends in IoT and Commercial
Building Technology Markets
Page 17
Source:IH S M arkit © 2016 IH S M arkit
Figure ES.2 O verallIoT O pportunity and D rivers

18. Opportunity Stretches Across Building
Types & Systems
Page 18

19. Effective Market Development Driven
by Relationships
Page 19

20. Intelligent Building and Cybersecurity
Study Funders
Page 20

21. Selected Access Points for Cyber-
Attacks – Where is the Risk?
Page 21
Source: Compass Intelligence, 2015

22. The Cybersecurity Ecosystem,
2016
Page 22
Source: Compass Intelligence, 2015

23. Risks Arising from Compromised
Systems
Page 23
Source: The IET – The Institution of Engineering and Technology
Corporate IT
systems
Loss of
view
Loss of
Information
Denial of
Service
Financial
Integrity
Building
Systems (ICS)
Safety and operational risk
Financial and reputational risk
Loss of
control
Impact on systems

24. Security Zones and Conduits
Page 24
• Solutions developed during the
design phase.
• Proposed design should be
assessed for new ideas.
• BMS application needs networked
segregation (firewall).
• Secure gateway protection (data
diode secures BMS).
Source: The IET – The Institution of Engineering and Technology

25. Cybersecurity Responsibility
Paradigm
Page 25
• Manage interaction between
infrastructure and business systems.
• Need clear operating procedures and
agreed “best practices”.
• Need to be based on recognized
standards (eg., ISO 27001).
• Legal issues – lease/tenancy
agreements covering data protection,
human rights, etc.
• Insurance policies need to be revised
and possibly updated.
Source: The IET – The Institution of Engineering and Technology

26. Profile of Cyber Attackers and Types of
Attacks Carried Out (2015), North
America
Page 26
Source: 2015 Verizon Data Breach Investigation Report

27. Key Recommendations: Intelligent
Building Products & Services Vendors
(BMS/BAS)
Page 27
• Embedded security is becoming more imperative in
today’s product development of IoT
• Understand end users, market trends, and related
technologies and solutions
• Education and cybersecurity expertise should also start
with you
• Stay ahead and know complexities and security risks of
your products
• Understand emerging intelligent building trends
• Understand standards

28. Key Recommendations: IT
Managers
Page 28
• Understand what systems are connected to the IT network and
OT network, including building systems
• IP-enabled may be a point of attack
• Have well-defined, well-enforced protocol for adding building
systems equipment and devices to the network
• Performing assessments and audits, have structured security
plan in place
• Understand emerging intelligent building trends
• Understand standards
• Evaluate the risks involved by not separating the IT and OT
network

29. Key Recommendations: Building
Owners, Administrators, Managers
Page 29
• Work closely and cooperatively with IT managers
• Perform full assessments of all systems, software,
and equipment, focus on IP-enabled, VPN
connected, and other vulnerabilities
• Get educated around building system vulnerabilities
• Be aware of financial loss, risk, and insurance
requirements of cyber-attacks
• Understand standards
• Work with BMA/BAS vendors and IT vendors
collaboratively

30. Reducing Risk and Next Steps to Prepare
Page 30
• Securing and hardening wireless and IP
networks
• Stricter authentication and access
management
• Further security protocols to restrict access
• Security software and ongoing updates and
maintenance
• Separation of the IT and OT networks
• Other planned measures to harden the
building system’s infrastructure and networks

31. Percent of Revenues by Region for the
Global Cybersecurity Market, 2015
Page 31
NA
$33.4
Europe
$17.4
APAC
$15.9
MEA
$5.3
LATAM
$3.8
Region Revenues
(B)
NA $33.4
Europe $17.4
APAC $15.9
MEA $5.3
LATAM $3.8
Source: Compass Intelligence, 2015

32. Global Cybersecurity Revenues
Market, 2015-2022
Page 32
Source: Compass Intelligence, 2015

33. Final Word
Page 33
“It is important to understand that cybersecurity
protective measures that aim at proactively
thwarting cyber-attacks, more so than simply
monitoring and reporting, are likely to offer the
best defense against such incidents/events.
Proactive prevention offers a range of economic
and non-economic benefits such as
safeguarding infrastructure as well as
organizational reputation.”

34. About this Research “Zero Net
Energy Building Controls”
Page 34
• CABA commissioned New Buildings Institute (NBI)
to conduct this research with a collaborative
framework that engaged funders from a cross-
section of building technology solution providers.
• Research Objective: Characterize Controls
Technology & Strategies in Zero Net Energy (ZNE)
Buildings.

35. CABA Members are Collaborating &
Funding this Research:
Page 35

36. Background – Getting to Zero Net Energy
Buildings
Page 36
A Zero Net Energy (ZNE) building generates as much
energy as it consumes annually. Also known as Net Zero
Energy.
• Zero = ‘nothing’
• Net = On-site Energy Production (renewable) minus Energy
Use, over 1 year
• Energy = All energy (electric, gas, steam, liquid fuel etc.)
consumed on site

37. Sample Group
Page 37

38. Sample Location
Page 38
NBI’s North America database
Mainly 10,000 – 100,000+ sq ft
Mainly Offices & Higher Ed
(Also: Courthouse, Lab, Library...)
Climate: CA has most ZNE
buildings
(Also: Canada, PNW, NE, CO)

39. Research Overview
Page 39
Investigate Building Energy
Monitoring & Controls Systems
in Low-Energy and ZNE Buildings
Areas of inquiry and participants:
1. The Selection and the System. What did they choose and why.
Design Firms
2. The Energy Impact. Savings assumptions in modeling and attribution in use.
Design Firms and Operators
3. The Use and User Experience. How is it being used, what is effective and lacking.
Operators and Occupants

40. Page 40

41. Types of Controls: Plug Loads
Page 41
• More devices and occupant-driven misc. loads coming online
• Regulated loads (Lights, HVAC, Water Heat…) becoming more efficient
• Most (64%) buildings surveyed use plug load controls or monitoring

42. Types of Controls: Shading & Daylighting
Page 42

43. Controls Design Selection Process: Selection
Criteria
Page 43
Prior Experience is the #1 selection criteria
• Indicator of the importance of getting key players involved early in the
design process
• Demonstrates the important role controls play in achieving a ZNE goal

44. Page 44
• ZNE is driven by good design,
High Performance Systems and
Shading
• Controls are at the Nexus of
Energy Performance
• New Roles & Old Relationships
• Occupants are a new Operator

45. World's Greenest Office Building Is
Dutch - The Edge
Page 45

46. Continental Automated Buildings Association
(CABA)
1173 Cyrville Road, Suite 210
Ottawa, ON K1J 7S6
613.686.1814
Toll free: 888.798.CABA (2222)
Fax: 613.744.7833
caba@caba.org
www.CABA.org
www.twitter.com/caba_news
www.linkedin.com/groups?gid=2121884
Connect to what’s next™
Thank you and get complimentary research
at:
Page 46