Remote monitoring and control of building automation systems has become standard practice. Being able to check on your building, receive alerts, and make adjustments from anywhere provides real operational value. But remote access also introduces risks.
Benefits of Remote BMS Access
Faster Response
When an alarm comes in at 2 AM: immediate visibility, remote corrective action, determination of whether on-site response is needed.
Improved Efficiency
Monitor energy consumption, adjust setpoints and schedules, verify systems are operating correctly — all without site visits.
Better Service
Service providers can diagnose issues before arriving on site. Specialists anywhere can assist with troubleshooting.
Risks of Remote Access
- Unauthorized access could disrupt building operations
- Building systems could be held for ransom
- Your network could be a pathway to other systems
- Data about building operations could be exposed
Remote Access Architectures
- ✓ Strong security
- ✓ Full system access
- ⚠ Requires VPN software
- ⚠ More complex setup
- Best for: Technical users
- ✓ Easy browser access
- ✓ Managed security
- ⚠ Vendor dependency
- ⚠ Recurring costs
- Best for: Turnkey solution
Security Best Practices
Network Segmentation: BMS on separate VLAN, firewalled from corporate and internet
Authentication: Strong unique passwords, MFA where available, individual accounts
Encryption: All remote connections encrypted (TLS 1.2+, VPN)
Access Control: Role-based permissions, logging, audit trails
Operational Best Practices
- Document all changes made remotely
- Notify building staff of significant changes
- Avoid major changes without on-site verification capability
- Have rollback plans for changes
Service Provider Access
- Provide individual accounts for service providers
- Limit access to necessary systems only
- Review access permissions periodically
- Remove access when relationship ends
Legacy System Considerations
Older BMS platforms often lack modern security features — no encryption, weak authentication, no audit logging.
For legacy systems, remote access should go through secure gateway or VPN only, never expose native protocols to internet, and be evaluated as part of upgrade planning.
Getting Remote Access Right
At Controls NYC, we help building owners implement secure remote access for both modern and legacy BMS systems. We also provide remote monitoring services for buildings that want the benefits without managing the infrastructure.
Contact us to discuss remote access options for your building.
Ready to Discuss Your Building?
Whether you're evaluating an upgrade, dealing with a failing system, or just want a second opinion — we're happy to talk through your options.
Schedule a Free Consultation