Skip to content
CS4CA ANZ

Navigating Legacy System Risks in Building Automation


Course
Upgrade subscription below

Mark de Brito of Honeywell outlines a defense-in-depth strategy for securing legacy OT systems, explaining how real-world breaches, insider and third-party risks, and poor segmentation expose building environments.

Operational technology is no longer a back-office concern, it is a frontline cybersecurity risk. From HVAC and fire panels to access control and IoT-connected building systems, legacy OT environments are increasingly exposed, yet were never designed to withstand modern threats. As high-profile breaches have shown, a single weak point can disrupt operations, compromise sensitive data and damage brand reputation.

In this session, Mark de Brito of Honeywell shares a practical defense-in-depth strategy for managing legacy OT risk across complex environments, including healthcare, commercial property and critical infrastructure. Drawing on real-world incidents, he outlines how attackers exploit flat networks, default credentials and third-party access to pivot deeper into enterprise systems.

In this insightful session, de Brito will also discuss:

  • Applying defense-in-depth principles to legacy building systems;
  • Managing insider, contractor and supply chain risk;
  • Strengthening visibility, segmentation and monitoring without disrupting operations.
 

 

Here is the course outline:

Navigating Legacy System Risks in Building Automation: A Defense-in-Depth Strategy

Completion

The following certificates are awarded when the course is completed:

CPE Credit Certificate

Floating Button