The New Cybersecurity Challenge for Commercial Buildings

Technology is now embedded in almost every aspect of modern commercial buildings. From access control and security to heating, lighting, lifts and energy management, connected systems are helping properties operate more efficiently and respond better to occupier needs.

But greater connectivity also brings greater exposure.

A cyberattack on a building is no longer just an IT issue. If critical systems are compromised, the consequences can extend to the day-to-day operation of the property itself, potentially disrupting access, environmental controls, security or other essential services.

A growing operational risk

One of the main challenges is that building technology is often spread across multiple systems and managed by different parties. Owners, occupiers, property managers, contractors and specialist technology providers may all have access to different parts of the same digital environment. Older infrastructure can also operate alongside newer smart systems, creating potential vulnerabilities that are not always immediately visible.

This makes it essential to understand exactly what technology is connected to a building, how systems interact and who has permission to access them. Regular reviews can help identify outdated software, unnecessary connections, inactive accounts and equipment that may no longer meet current security standards.

The increasing use of external technology providers adds another layer of risk

Many building systems rely on suppliers for maintenance, software updates, monitoring or remote access. As a result, cybersecurity should not only focus on internal systems but also on the wider network of organisations supporting the building. Clear access controls, strong passwords, multifactor authentication and defined cybersecurity requirements for suppliers can help reduce exposure. Separating critical building systems from wider corporate IT networks can also limit the impact of an attack by preventing one compromised system from providing access to everything else.

Cybersecurity cannot remove every possible threat, which means property owners and managers also need to prepare for what happens if an incident occurs. A clear response plan should define who is responsible, how affected systems are isolated, how essential operations can continue and how occupiers and external specialists should be informed. Cyber incidents should therefore form part of broader business continuity planning, rather than being treated as a separate technology issue.

Testing these procedures is equally important. A response plan that has never been tested may prove difficult to implement when a real disruption takes place.

Digital resilience and building quality

As commercial buildings become more technology-driven, cybersecurity is becoming increasingly connected to the overall resilience of an asset.

Location, design, sustainability and operational efficiency remain key elements of building quality, but owners and occupiers also need confidence that the technology supporting the property is secure and properly managed. Cyber risk should therefore be considered throughout the lifecycle of a building, from the selection of technology and suppliers to ongoing management, maintenance and upgrades. Smart technology can make buildings more efficient, sustainable and user-friendly. But greater connectivity needs to be matched by stronger protection, because one weak link can create a serious breach.

Ultimately, the most advanced buildings will not simply be those with the most technology, but those capable of using it securely and remaining operational when disruption occurs.

Source: Savills – Understanding the risks of being hacked through your tech and building systems

Find a Property

Explore Properties

Talk to an expert

Office Locations

Market Property

Office Locations

Talk to an expert

Services

Browse by Sector

Talk to an expert

Office Locations

Company Profile

The Savills network

Talk to an expert

Office Locations

Market Reports

The Savills Blog

Savills Podcast Series

Find an Expert

Find an Office

Why join Savills Gr

Current Vacancies

The new Cybersecurity challenge for commercial buildings

Technology is now embedded in almost every aspect of modern commercial buildings. From access control and security to heating, lighting, lifts and energy management, connected systems are helping properties operate more efficiently and respond better to occupier needs.

Similar Posts

Savills Greece Turns 30: Three Decades of Change in a Market That Never Stood Still

The 6 Phases of Construction Project Management: From concept to completion

Let us guide you in Real Estate.
Local Leadership with

Find a Property

Explore Properties

Talk to an expert

Office Locations

Market Property

Office Locations

Talk to an expert

Services

Browse by Sector

Talk to an expert

Office Locations

Company Profile

The Savills network

Talk to an expert

Office Locations

Market Reports

The Savills Blog

Savills Podcast Series

Find an Expert

Find an Office

Why join Savills Gr

Current Vacancies

The new Cybersecurity challenge for commercial buildings

Technology is now embedded in almost every aspect of modern commercial buildings. From access control and security to heating, lighting, lifts and energy management, connected systems are helping properties operate more efficiently and respond better to occupier needs.

Similar Posts

Savills Greece Turns 30: Three Decades of Change in a Market That Never Stood Still

The 6 Phases of Construction Project Management: From concept to completion

Let us guide you in Real Estate.Local Leadership with

Subscribe to our Newsletter

Let us guide you in Real Estate.
Local Leadership with

Subscribe
to our Newsletter