PNNL

As buildings become smarter, they also become more vulnerable to cyberattacks. Building controls systems (heating, ventilation, lighting, energy management, etc.) and other industrial control systems connected to the internet present new cybersecurity challenges. These systems, known as operational technology (OT), are essential to daily operations across federal and commercial facilities.

Pacific Northwest National Laboratory (PNNL), in partnership with the Department of Energy’s Federal Energy Management Program (FEMP) and Building Technologies Office (BTO), is supporting enhanced building cybersecurity and energy reliability through enhanced security in control systems and other OT—improving the safety, reliability, and operating efficiency of government facilities nationwide.

The Importance of OT Cybersecurity in Buildings

Modern building technologies improve energy efficiency, occupant comfort, and asset reliability, but these benefits won’t be fully realized if they offer bad actors easy entryways to confidential information, business sensitive information, or the ability to hold OT ransom. Each connected sensor, controller, and automation network can create both efficiency opportunities and pathways for cyber intrusions.

For federal facilities, which often house mission-critical operations, these vulnerabilities pose significant risks to national interests. Through research, tool development, and training, PNNL and the FEMP are helping agencies identify risks early and build stronger cyber defenses into the design and operation of their buildings and their OT networks.

PNNL provides technical expertise and practical tools developed for federal agencies, but with many commercial entities adopting federal cybersecurity frameworks for their own uses, these tools can be used by the commercial building sector as well. 

Ready to Get Started?

Assessment tools, information resources, and training materials are available for evaluating OT security. Use these tools to begin assessing and strengthening your facility’s cybersecurity posture.