Cyber-BE Lab

April 26, 2023

IoT Data Privacy: Managing and Anticipating Data Privacy in the Built Environment

This white paper is a guide to help building owners and other AEC professionals become aware of potential IoT data privacy concerns and prepare for emerging regulation. The white paper covers the types of data that IoT devices in the built environment gather, regulations that impact IoT in the built environment, and the future of…


March 30, 2023

IoT Device Security Public Policy Dataset

The dataset, “U.S. Federal and State Regulation of Internet of Things (IoT) Devices,” is now available to the public. The dataset covers all existing federal and state regulation up to 2022 and was a part of our research to better understand the smart building cybersecurity policy context. This dataset was funded by the National Science…


March 7, 2023

Industry Report: IoT Cybersecurity in the Built Environment

IoT Cybersecurity in the Built Environment: Improving Facilities and IT Collaboration to Keep Our Buildings Smart and Secure, is now available. This industry report presents the findings from a three-year study focused on how higher education facilities and IT groups share their knowledge and skills in order to improve IoT cybersecurity and how policies on…


June 22, 2021

Help Us Improve IoT Cybersecurity

We are looking for university CISO, Facilities, and IT offices willing to be a part of a research study to understand risk mitigation strategies for IoT in the built environment in university settings. This will involve an informational interview with IT, Facilities, and/or university cybersecurity professionals who are willing to share their campus’ current IoT…


February 24, 2021

IoT Policy Landscape: Implications for Managing Security in the Built Environment

A guide on IoT security policy to help O&M professionals, and AEC teams understand the limitations and implications of the U.S. IoT policy landscape on IoT security. This guide demonstrates the impact and limitations of IoT security policies and provides recommendations for developing one’s own IoT security policy and procedures in light of the limitations…


IoT and Cybersecurity Risk: Core Issues for the Building Industry

IoT and Cybersecurity Risk: Core Issues for the Building Industry provides building industry stakeholders with the key information needed to shape policy debates. The paper discusses what IoT means in the context of the building industry and some of the substantive benefits and risks that these systems of devices pose. In particular, we focus on…