A Building Automation System is operational technology used to monitor and control facility functions such as heating, ventilation, air conditioning, lighting, access, and other environmental systems. BAS platforms often expose management interfaces, field controllers, and protocols that let operators adjust physical conditions from a central console or remote location.
In cyber security, BAS matters because it sits at the boundary between IT networks and real-world operations. If a BAS device is internet-exposed, compromised credentials, weak configuration, or unpatched software can give an attacker control over building functions, disrupt availability, or create a path into nearby systems. Defenders reduce this risk by isolating BAS networks, using authenticated and encrypted remote access, restricting vendor connections, inventorying end-of-life products, and replacing unsupported systems rather than relying on future patches.