This Advisory Note explains why changes in how BMCS are now integrated into modern buildings can result in lack of visibility and control over this important infrastructure and explains what Facility Managers and building asset owners can do to reduce risk and improve operational resilience.

Integrated Networks Can Create Operational Risk

Previously installed as standalone systems, BMCS are now often integrated into corporate IT environments, utilising shared networks and infrastructure.

This technology integration provides centralised administration benefits and should produce increased system resilience and security, along with improved technology lifecycle management processes.

However, it can also introduce an operational risk to the facility where BMCS ownership, accountability and maintenance responsibilities as part of the larger system are not well defined or managed.

Computing Infrastructure & Improved Ongoing System Resilience

A BMCS is only ever as reliable as the infrastructure that it operates on. This includes:

• Server hardware and operating systems configurations
• Networks and communications pathways
• Backup, recovery and cyber security arrangements.

Historically, much of the process and support required to manage the underlying BMCS infrastructure sat external to the organisations corporate IT oversight and was managed directly by BMCS service providers. In an integrated IT environment this has changed.

BMCS installed utilising shared infrastructure run on virtual servers that are configured to utilise shared building networks and expected to comply with corporate ICT standards for security, patching and access control.