Critical infrastructure and facilities increasingly rely on facility-related control systems that are Internet-enabled. These systems provide critical services that allow a building to meet building occupants' functional and operational needs. Still, they can also be easy targets for hackers and people with malicious intent.

Attackers can exploit controls systems to gain unauthorized access to facilities, cause physical destruction of building equipment, and use them as an entry point to traditional informational technology (IT) systems and data. This exposes an organization to significant financial obligations to contain and eradicate malware or recover from a cyber event.

During this session, participants will gain a general understanding of the overall lifecycle of cybersecurity for facility-related controls systems. They will be provided industry standards, reference materials, and guidance on identifying vulnerabilities and threats at each stage. With the ever-increasing number of bad actors from around the globe, it is no longer a matter of if the critical infrastructure will be hacked, but when. So how do you take steps to protect your facilities and respond if your building is hacked?

This session will identify tools and methodologies to discover and prioritize assets, identify attacks, and contain and eradicate a cyber event. In addition, the session will leave the participants with examples of how industry-leading controls vendors are ruggedizing their devices and software and how to access the Governments Approved Products List (APL).