Nixon Peabody LLP

  • People
  • Capabilities
  • Insights
  • About

Trending Topics

    • People
    • Capabilities
    • Insights
    • About
    • Locations
    • Events
    • Careers
    • Alumni

    Practices

    View All

    • Affordable Housing
    • Community Development Finance
    • Corporate & Finance
    • Cybersecurity & Privacy
    • Environmental
    • Franchising & Distribution
    • Government Investigations & White Collar Defense
    • Healthcare
    • Intellectual Property
    • International Services
    • Labor & Employment
    • Litigation
    • Private Wealth & Advisory
    • Project Finance
    • Public Finance
    • Real Estate
    • Regulatory & Government Relations

    Industries

    View All

    • Cannabis
    • Consumer
    • Energy
    • Entertainment
    • Financial Services
    • Healthcare
    • Higher Education
    • Infrastructure
    • Manufacturing
    • Non Profit
    • Real Estate
    • Technology

    Value-Added Services

    View All

    • Alternative Fee Arrangements

      Developing innovative pricing structures and alternative fee agreement models that deliver additional value for our clients.

    • Continuing Education

      Advancing professional knowledge and offering credits for attorneys, staff and other professionals.

    • Crisis Advisory

      Helping clients respond correctly when a crisis occurs.

    • DEI Strategic Services

      Providing our clients with legal, strategic, and practical advice to make transformational changes in their organizations.

    • eDiscovery

      Leveraging law and technology to deliver sound solutions.

    • Global Services

      Delivering seamless service through partnerships across the globe.

    • Innovation

      Leveraging leading-edge technology to guide change and create seamless, collaborative experiences for clients and attorneys.

    • IPED

      Industry-leading conferences focused on affordable housing, tax credits, and more.

    • Legal Project Management

      Providing actionable information to support strategic decision-making.

    • Legally Green

      Teaming with clients to advance sustainable projects, mitigate the effects of climate change, and protect our planet.

    • Nixon Peabody Trust Company

      Offering a range of investment management and fiduciary services.

    • NP Capital Connector

      Bringing together companies and investors for tomorrow’s new deals.

    • NP Second Opinion

      Offering fresh insights on cases that are delayed, over budget, or off-target from the desired resolution.

    • NP Trial

      Courtroom-ready lawyers who can resolve disputes early on clients’ terms or prevail at trial before a judge or jury.

    • Social Impact

      Creating positive impact in our communities through increasing equity, access, and opportunity.

    1. Home
    2. Insights
    3. Articles
    4. Cybersecurity needs to protect our buildings as well as our dataArticles

    Article

    Cybersecurity needs to protect our buildings as well as our data

    June 9, 2021

    Share

    By Denise Pursley

    With the increase in ransomware and cyberattacks, companies should remember it is not only important to protect data and communications, but also physical property. Property owners need to be vigilant and continually assess and upgrade their smart building management systems to safeguard against a potential cyberattack

    The Colonial Pipeline hack and the broader epidemic of ransomware and other cyberattacks targeting businesses in various industries should remind us that cybersecurity is necessary not only to protect data and communications, but also physical property. The state-of-the-art building management systems that commercial and multi-family property owners invested in years ago to integrate facility lighting, HVAC, fire protection systems, elevators, parking sensors, and surveillance cameras, may be vulnerable to a cyberattack. Property owners need to be vigilant and continually assess and upgrade their smart building management systems to safeguard against a potential cyberattack that could not only compromise sensitive personal information, but, for example, could shut down a building’s heat or electricity or wreak havoc with the elevators in an office tower.

    In 2013, a hacker used credentials from an HVAC maintenance contractor to hack Target’s network. This is an early example of how the interconnection of building systems can lead to security vulnerabilities. In December 2020, the Maryland Innovation & Security Institute (“MISI”) and DreamPort held a U.S. Cyber Command-inspired “Hack the Building” event where remote and on-site teams tried to break into a fully equipped 150,000 square foot “smart” building. The unsuccessful teams focused their attacks directly on the building’s IT systems; the successful teams targeted interconnected devices—recognizing that penetrating one vulnerable system affords access to all of the systems it is connected to. It’s not surprising, then, that in a recent survey by Deloitte, commercial property owners and managers identified third-party vendors and service providers as presenting the biggest cybersecurity threat.

    The federal government recognized the importance of securing interconnected devices by the passage of the Internet of Things Cybersecurity Improvement Act (the “Act”) in 2020, which tasked the National Institute of Standards and Technology (“NIST”) with creating cybersecurity standards for IoT devices purchased by federal agencies. The public comment phase of the NIST’s comprehensive guidelines was recently completed, and they are being prepared for final release. While developed for IoT devices being sold to the U.S. government, the NIST standards will provide guidance for all IoT device manufacturers who may seek to apply the same standards to consumer products in order to avoid having a second production line. Manufacturers of small inexpensive devices that connect to a network used by many buildings, such as temperature controls and smart locks, however, may find it challenging to comply with the new standards while managing costs. Therefore, property owners must take the initiative to ensure their IoT devices and building management systems are updated and remain state of the art.

    PrivacyCybersecurityPrivacy

    Practices

    Cybersecurity & Privacy

    Industries

    Real Estate

    Subscribe to stay informed of the latest legal news, alerts, and business trends.Subscribe

    • People
    • Capabilities
    • Insights
    • About
    • Locations
    • Events
    • Careers
    • Alumni
    • © 2023 Nixon Peabody. All rights reserved
    • Privacy Policy
    • Terms of Use
    • Statement of Client Rights
    • Supplier Diversity Program
    • Nixon Peabody International LLC
    • PAL