Home Services Building System Cybersecurity

Building System Cybersecurity

Specialization: We focus on cybersecurity for operational technology (OT) systems, such as HVAC, BAS, lighting and elevators, that IT departments are often unequipped to handle. Our solutions are tailored for both public and private sectors, offering robust redundancy, reliability and flexibility. We support a range of infrastructure, from state-of-the-art commercial headquarters to complex military installations, to sensitive compartmented information facilities (SCIFs) and more. Engaging with our cybersecurity experts is an investment in your success. Together, we can create innovative solutions that solve cyber concerns today and into the future.

Expertise: Our cybersecurity team boasts decades of experience and holds numerous certifications, ensuring top-notch protection for your digital assets. We safeguard your operations and instill confidence among investors, tenants and stakeholders. By promoting robust security protocols, we boost industry resilience against cyber risks and enhance overall competitiveness. Our proactive approach to cybersecurity ensures that your systems stay ahead of evolving threats and comply with regulatory requirements, providing a secure foundation for sustainable growth and development in today’s digital landscape.

Solutions: We offer a full-spectrum cybersecurity service designed to enhance the security of your OT. Our approach includes a thorough analysis of your current cybersecurity posture, the promotion of cyber best practices and the validation of these practices through cyber commissioning. Whether you need a comprehensive solution or targeted support, we tailor our services to address your specific needs to provide operational resilience.

  • RISK ANALYSIS – Our remote and on-site assessments focus on key areas including exposed IP elements, zero trust network management, OT topology, user personas, change control, patching and backup protocols.
  • BEST PRACTICES CONSULTING – We offer expert guidance on a range of critical areas, including the ISA/IEC 62443 foundation standards, best practice guidelines and response protocols. Our services also cover vendor risk management and compliance, as well as remote or on-site training and awareness programs.
  • CYBERSECURITY COMMISSIONING – We validate risk remediation and mitigation by ensuring that best practices are effectively implemented and verified. This includes remote and on-site cyber commissioning and working closely with client IT/OT organizations and systems integrators to ensure thorough and effective solutions.

Integrated Approach to Cybersecurity

  • Vulnerability Assessments
  • Tabletop Exercises
  • Risk Assessment and Management
  • Security Architecture Design
  • Network Monitoring and Threat Analytics
  • Security Incident Response
  • Security Awareness Training
  • Security Auditing and Compliance
  • Security Governance and Policy Development
  • Patch Management
  • Security Information and Event Management (SIEM)
  • Supply Chain Security
  • Incident Forensics and Analysis
  • Cyber Commissioning

Industry Partners

Michael Baker is a proud partner and supporter of the industry’s leading organizations for cybersecurity standards. Our staff serves on the International Society of Automation 99 (ISA99) standards committee and contributes to Building Cyber Security (BSC), a nonprofit that created the first set of cybersecurity standards for building control systems based on ISA 62443.