Simulators › Security Audit Lab
BAS Security Audit Lab
Most building automation security gaps aren’t exotic. They’re a port forward someone added for convenience, a factory password, a shared login, a remote tool nobody removed. This lab gives you a simulated building: a network diagram, the owner’s asset inventory, each device’s accounts, services and settings, and IT’s external exposure report. Find the gap, make the call, apply the right fixes without breaking the building, and verify.
- Read the work order
- Inspect the site and IT’s report
- Make the call, remediate, verify
Choose an audit
Audits Exposure, accounts, network, remote access and maintenance gaps
Security for the people who run the building
BAS Communication: A Field Reference covers the networks these audits sit on. Start with the free BAS security hub, then read remote access without the port forward, default passwords and shared accounts, segmentation: talking to IT, hardening supervisors and controllers, why BACnet and Modbus have no security, IEC 62443 and NIST for BAS techs and incident first steps.
Work order
A training model of a generic building, not any manufacturer’s product. Addresses use documentation ranges. A real security assessment needs the owner’s written permission and the owner’s IT team involved from the start; don’t scan or test a network you haven’t been authorized to.