Debuilt property

View Original

Cyber security in real estate a rising threat

Daniel Lepore is the Head of Asset Technology for AMP Capital Real Estate. He is accountable for the business’s strategic technology roadmap, ensuring delivery of value through technology adoption. Daniel is responsible for overseeing a portfolio of initiatives designed to enhance AMP Capital’s Office, Logistics and Retail sectors. Daniel is an accomplished technologist with a passion for delivering innovative solutions that enable sustained, practical outcomes for people, building operations and real estate owners. With over 10 years’ of experience in successfully developing, executing and verifying energy efficiency measures through building automation and performance contracting, Daniel understands the crucial role technology will play in reducing our impact on the climate, sustaining healthy buildings and solving real world problems.

Cyber security is a term usually associated with data breaches such as hackers accessing bank accounts, viruses locking up computers and conflicts between nation-states.

But it is fast becoming a must-know topic for real estate investors.

Modern buildings are adopting increasingly more internet-accessible technologies, which manage the safety, accessibility and thermal comfort of occupants. All of which are intended to do so to enhance sustainability performance and create seamless tenant experiences.

AMP Capital’s Smart Building Platform alone analyses some 385,000 individual data points every 15 minutes, detecting equipment that needs maintenance, whilst Artificial Intelligence (AI) makes pre-emptive control adjustments to air conditioning operations to reduce carbon emissions.

This generates an enormous amount of data that must be stored and managed securely.

And there are the systems which control access to buildings through security gates, send the elevators to the right floors, run the camera monitoring systems, turn the lights on and off – and even monitor life safety that have never been more integrated with one another.

The Australian government has labelled malicious cyber activity one of the most significant threats impacting Australians, saying that in FY20 alone the Australian Cyber Security Centre, the lead agency for cyber security, responded to 2,266 cyber security incidents at a rate of almost six per day.1

The true volume of malicious activity in Australia is likely to be much higher the government supposes, with cyber incidents targeting small, medium and large Australian businesses costing the economy up to $29 billion per year, or 1.9% of Australia’s gross domestic product.2

So how important is cyber security to the real estate industry? And what are landlords doing about it?
Well, the answer is, a lot. Most modern office buildings or shopping centres likely run some 15 to 30 different operational technologies and computer systems side by side3.

Increasingly, these systems operate on common network infrastructure with an ability to be centrally accessed, meaning the applications and data collected are managed over the internet and stored in cloud computing servers.

There are more and more technology enhancements being introduced every day - mobile phones are being used for access control, elevators are controlled by touchless sensors detecting fingers and soon, facial recognition and biometrics will become mainstream, allowing people recognised by the AI systems to walk through security checkpoints without stopping.

The increasing sophistication of the technology means buildings and infrastructure assets have become targets for cyber criminals and so-called state-based actors and it is more important than ever that our real estate assets are properly protected.

Earlier this year, hackers gained entry to the systems of America’s biggest fuel pipeline, shutting it down and demanding a ransom, leading to long lines at petrol stations and higher fuel prices.

In May, the world’s biggest meat processing company was forced to shut workers out of its operations after hackers took control of its systems.5

In real estate, the threat of ransomware cybercrime is growing. Although, one of the main vectors of attack is quite old fashioned – encouraging a worker to click on a link in an email that triggers a malicious download.

For buildings, the problem is heightened because many workers with access to a buildings systems are not educated in dealing with cybercrime. Most buildings have trades, cleaners, contractors and trainees with inside access.

But cybercrime does not have to be just about ransomware. Shopping centres face the simple threat of pranksters getting access to their digital billboards and signage and changing the messaging and videos being displayed causing reputational damage. But cyber criminals can also pose safety issues for people, shutting off access to floors and mischievously changing heating and cooling settings.

To proactively combat cyber-crime and allow the business to set up a safe smart building strategy, AMP Capital has implemented a portfolio wide Operational Technology (OT) cyber security program focusing on three complimentary streams.

  • A standardised remote access solution, enabling safe connectivity between building systems and authorised staff and contractors.

  • Policy guidelines founded on world-leading cyber security standards developed by the US National Institute of Standards and Technology, specifically tailored to building management systems.

  • Uplifting industry awareness through regular training to ensure that those people operating assets are properly educated on cybercrime and digital facilities management, creating a proactive cyber aware culture.

This industry leading program has established the foundations to transform AMP Capital into a globally recognised, innovative, data-insights led organisation, augmented by connecting and collecting data from diverse streams including building technologies that keep occupants safe, secure and comfortable.

People, process and technology must be intrinsically linked to achieve a sustained, long term cyber awareness culture. As Cyber security continues to evolve and change as the industry does, AMP Capital’s vigilance means our buildings can continue to deliver exceptional real estate experiences.
Like much of the rest of our lives, real estate has been eaten by software – buildings today are as reliant on silicon as they are on steel.

Ensuring the safety of tenants and investors from these new threats is at the forefront of a modern landlords’ minds.

1. https://www.homeaffairs.gov.au/cyber-security-subsite/files/cyber-security-strategy-2020.pdf.
2. https://www.homeaffairs.gov.au/cyber-security-subsite/files/cyber-security-strategy-2020.pdf.
3. AMP Capital
4. https://www.bloomberg.com/news/articles/2021-06-04/hackers-breached-colonial-pipeline-using-compromised-password.
5. https://www.bbc.com/news/business-57423008.

This article first appeared on AMP’s blog here…