ENERGY – BUILDING MANAGEMENT SYSTEMS
attacks. Vulnerable are not only buildings
fitted with control systems but any
system with internet-connected devices.
QinetiQ has warned that the BMS
is often the most vulnerable part of an
organisation’s IT network, with installers
often lacking in security knowledge.
In fact, a BMS is effectively a type of
industrial control system (ICS) and such
systems have a long history of significant
cyber-attacks, starting with the 1982 CIA
attack on a Siberian gas pipeline which
caused a large explosion.
An example of a direct attack on a
BMS is the Tridium Niagara vulnerability
that gave control of locks, lifts and CCTV
cameras within many organisations using
that BMS system. Indirect attacks are also
possible. For example, in 2013 US retailer
Target had its accounts hacked because
of vulnerabilities in the network-attached
HVAC system, resulting in 40 million
customers having their payment card
details exposed.
There are also wider national security
concerns beyond these isolated
criminal attacks. In a conflict situation,
coordinated state attacks could shut
down large parts of critical infrastructure,
creating hospitals without lighting and
offices with doors and lifts locked.
These significant threats are not a
reason to abandon BMS, but rather should
motivate planning for security during
installation and maintenance.
BMS FOR OTHER FUNCTIONS
As well as the heating, cooling, ventilation
and lighting functions discussed above,
BMS may also control electric power
controls, security, observation and access
controls, fire protection systems, lifts
and escalators, plumbing and intercom
systems.
Connecting these additional
systems carries benefits beyond
energy conservation. For example, fire
systems are already connected with
interlinked smoke alarms, door closers
and sprinklers. If a BMS has control over
ventilation, then linking this to the fire
system can enable a building to slow the
spread of fire, direct smoke away from
escape routes and prevent people from
being trapped. Specific measures might
include closing windows and dampers
in ventilation ducts, turning on fans to
evacuate smoke and parking lifts on the
ground floor to prevent their use during
the fire.
Connecting building control systems
can also enable sensors to be shared,
reducing overall cost and complexity. For
example, motion detectors could be used
for security systems, as well as to control
heating and lighting.
A properly implemented building
management system can greatly reduce
a building’s energy use and maintenance,
while also making it safer and more
reliable. However, if poorly implemented,
a BMS can make it difficult for occupants
to control their environment and greatly
increase the dangers of cyber-attack.
Both new builds and retrofits should seek
to utilise the benefits of BMS, while fully
considering occupiers’ needs and security
best practices.
Hallé St Peter’s adopts new systems
Siemens is helping the Hallé orchestra cut its costs by 35% through energy
reduction. It has created an integrated digital solution to make Hallé St Peter’s,
the historic recording and rehearsal venue in Manchester, energy efficient. The
new £4.3m three-storey extension, known as The Oglesby Centre, includes
sensors that monitor and automatically adjust temperature, air quality and
lighting to achieve optimal room conditions. You can find out more in OE’s
February 2020 issue, p8, also available at www.is.gd/mogehi.
44 www.operationsengineer.org.uk Autumn 2020
/mogehi
/www.operationsengineer.org.uk