Podcast #46: Smart Building ROI Is a Risk Management Problem

Key Takeaways

• Owners often lack visibility of assets, connections, and access
• Unmanaged OT risk erodes ROI before technology performance matters
• Governance gaps let vendors become de‑facto risk owners
• Air‑gap myths hide cyber exposure in building systems
• Aligning facilities, IT, and asset teams drives operational resilience

Pulse Analysis

The commercial real‑estate sector pours billions into IoT‑enabled HVAC, lighting, and access‑control systems each year, yet many owners report that the expected uplift in net operating income never materialises. Analysts trace the discrepancy to an information failure: without a clear inventory of devices, network topology, and access rights, any analytics or energy‑optimization effort is built on shaky ground. This hidden risk layer can silently inflate operating costs, increase downtime, and ultimately erode the financial case for smart‑building upgrades.

Operational resilience has emerged as the lingua franca that bridges the gap between cybersecurity jargon and boardroom priorities. Standards such as ISA/IEC 62443 assign ultimate responsibility to the asset owner, but in practice 80‑90 % of owners defer that duty to vendors, effectively turning third‑party contractors into de‑facto risk bearers. When a rogue wireless access point or an air‑gapped utility system is compromised, the loss of rent, tenant confidence, and brand reputation falls squarely on the owner’s balance sheet. Establishing a governance model that defines clear roles—facilities, IT, asset managers, and executives—ensures that risk mitigation becomes a strategic lever rather than an after‑thought.

For owners ready to capture the promised ROI, the first step is a disciplined asset audit: catalog every OT device, map its network connections, and assign explicit access permissions. Next, implement layered access controls and continuous monitoring to detect unauthorized changes. Finally, embed these processes in a cross‑functional governance framework that aligns incentives across facilities staff, vendors, and corporate leadership. By moving risk oversight from the facilities closet to the enterprise asset‑management agenda, owners can protect revenue streams, enhance tenant experience, and finally realise the financial benefits that smart‑building technology was designed to deliver.