Required Caveats
- This topic is regulated. The information above is general guidance, not compliance advice.
- Confirm obligations against the current primary regulation before relying on this entry.
- Evidence state: sourced.
Answer
Old BACnet is not secure by default; best practice includes VPN remote access, firewall segmentation, dedicated VLANs, role-based BMS access, and no uncontrolled public IP access. BACnet/SC (Secure Connect) provides encrypted communication.
Why It Matters
This matters in these Alpha Controls workflows: bms-security-audit, network-segmentation.
Related Concepts
Relevant GUVNR Workflows
- bms-security-audit
- network-segmentation
Evidence & Provenance
- Source
- ASHRAE Guideline 32; industry security best practices
- Provenance
- first-hand
- Last reviewed
- 2024-04-01
- Review cycle
- 2 years
Need a governed answer for your building?
Talk to an Alpha Controls engineer about your BMS, HVAC controls, and managed instrumentation needs.