Cybersecurity in the Management of Smart Buildings Cover Image

Киберсигурност при управлението на интелигентни сгради
Cybersecurity in the Management of Smart Buildings

Author(s): Noncho Dimitrov
Subject(s): Economy, Business Economy / Management
Published by: Университет за национално и световно стопанство (УНСС)
Keywords: smart buildings; cybersecurity; building management systems; facility management; critical infrastructure; risk management

Summary/Abstract: Smart buildings are fundamentally reshaping the real estate landscape. By weaving together traditional operational systems—like HVAC and access controls—with modern IT infrastructure, we’ve unlocked incredible efficiency and comfort. However, this hyper-connectivity is a double-edged sword. As our buildings get "smarter," they become prime targets for cyber threats, often leaving facility managers in a vulnerable position they aren't fully trained to navigate. This article dives into the messy intersection where operational technology (OT) meets IT. We aren't just looking at the technical glitches; we’re cataloging the specific threats aimed at Building Management Systems and addressing the very real "competency gap" currently haunting the industry. By leaning on established benchmarks like the NIS2 Directive, GDPR, and NIST 2.0, we explore what it actually takes to treat a building as a piece of critical infrastructure. The core takeaway is simple: cybersecurity is no longer just "the IT guy’s problem." It has evolved into a high- stakes management discipline. Success here requires a cultural shift—better policies, hands-on staff training, and a risk-governance mindset that is baked into daily operations. We also examine how "Security-by-Design" is shifting from a niche technical requirement to a major competitive advantage in the real estate market. Ultimately, securing a smart building isn't something you can just "bolt on" as an afterthought. It requires a commitment from the boardroom down to the mechanical room. In today’s climate, the owners who view security as a core business value will thrive, while those who ignore the operational and financial risks will find them simply too large to manage.

  • Issue Year: IX/2025
  • Issue No: 4
  • Page Range: 183-189
  • Page Count: 7
  • Language: Bulgarian
Toggle Accessibility Mode