The link between Smart and cyber security

Internet of Things (IoT) smart devices such as cameras and sensors can monitor everything from heating and ventilation to air conditioning and lighting, enabling buildings to be continually monitored for energy efficiency. Similarly, EV charging points and solar panels are now often fitted as standard in new developments.

While smart technologies play a key part in improving sustainability and meeting net zero targets, they are also vulnerable to cyber-attacks. Not only can smart devices be disabled by cybercriminals, but they also provide a gateway to accessing confidential company data, which, once accessed, leaves companies open to ransom demands from hackers.

This threat of cyber-attacks is exacerbated by the continuing trend to remote or hybrid working models. The proliferation of devices used to access work accounts means that legacy security solutions are no longer enough to protect against hackers.

The government’s annual cyber security breaches survey 2023 found that ‘cyber security breaches and attacks remain a common threat. Across all UK businesses, there were approximately 2.39 million instances of cybercrime and approximately 49,000 instances of fraud as a result of cybercrime.

32% of businesses and 24% of charities recalls many breaches and attacks from the last 12 months. However, the figure is much higher for medium and large businesses (59% and 69% respectively). The survey estimates that the single most disruptive breach from the last 12 months cost each business, of any size, an average of £1,100. For medium and large businesses, the cost is considerably higher – nearly £5,000.

Worryingly, the survey found that some ‘cyber hygiene’ measures are in decline. These include the use of passwords, the use of network firewalls and policies to apply software security updates within 14 days (both down by 12% in 2023).

Small and medium-sized businesses in particular have made cyber security less of a priority, due to current economic pressures.

Malware, phishing and spyware are just some of the techniques used by cybercriminals to attack these vulnerabilities. Phishing remains the most common form of attack, with around 80% of large and medium businesses reporting such breaches. It involves sending malicious emails to targets with the intention that they download malware enabling sensitive data to be captured.

The risk of cyber-attacks is very likely to grow with the increasing popularity of artificial intelligence (AI). According to a report published by the National Crime Agency in January, AI will ‘almost certainly increase the volume and heighten the impact of cyber-attacks over the next two years’, enabling far more convincing interaction with potential victims, without the grammar and spelling mistakes that phishing emails usually contain. It will also, by summarising data more quickly, enable cybercriminals to identify high-value assets.

Managing and implementing cyber security as well as networking measures has never been more important. The government’s 2023 survey noted that only half of organisations seek external information or guidance on cyber security. Meaning that half are currently not adhering to recognised standards or accreditations.

Solutions

A separate Internet of Things (IoT) strategy, with devices connected to segregated IoT data networks and using separate internet lines, is a first step in managing a smart building. Added to this regular cyber security audits/risk assessments should be conducted to find potential weaknesses.

With decades of experience, at Backbone Connect we offer free cyber audits which take place before any technology is installed, allowing us to identify vulnerabilities, and assess priorities by creating a bespoke plan to suit your requirements.

We then continually monitor your security measures to ensure they meet your needs, proactively managing any concerns that arise.

Our experts are here to ensure your buildings are both Smart and Secure.