Cybersecurity for Building Automation: BMS and BACnet

BMS engineers and technicians, system integrators, facility managers, MEP consultants and OT or IT security staff who look after building systems. Basic networking knowledge is assumed.

No. It teaches people responsible for buildings to protect them. There are no techniques for attacking systems, and the course warns against testing live buildings without written permission.

No. It is about BACnet, Modbus and the design of any BMS. Siemens and other companies' lessons are used where they explain the ideas well, credited on each module, and none of them is affiliated with EDWartens.

No. The course explains BACnet/SC from the lessons and the standard's principles. If you have a controller that supports it, the bench exercises become more real.

Yes. Every module, the notes, the project and the final assessment. The only paid item is the certificate, if you want it.

An EDWartens Certificate of Completion, issued when you pass the final assessment, with a number anyone can verify on our site. It is not a BACnet International or ASHRAE certification.

About 8.1 hours of video lessons, notes and practice questions, plus about 10 hours if you do the project. At an hour a day, that is about two and a half weeks.

You assess the BMS of a 14-storey office tower in Lagos, Nigeria, whose tenant wants evidence that the building's systems are secure. You write an asset inventory, a zones and conduits model, a risk register, and a plan for hardening, vendor remote access and a phased move to BACnet/SC.

No. The lab is optional practice. You can skip it whenever you like, and it never blocks your progress, the final assessment or your certificate.

Yes. Every lab level for this course opens in your browser, free, with nothing to install.

Yes. Learning costs ₹0 in India: every module, the written notes, the practice tasks and the final assessment, with no card and no trial period. The only paid item is the optional EDWartens Certificate of Completion, ₹599 including GST for this intermediate course, paid in rupees through Razorpay, and only if you want it after passing the final assessment.

The Cybersecurity for Building Automation: BMS and BACnet course has 9 modules. It opens with "Buildings that got hacked", goes through "How a BMS network is built, and where it is weak", "Designing a secure building management system", "Securing BACnet systems in depth" and "Where BACnet security is going" and ends with "Final Assessment". The full list with minutes is under "What you learn" on this page.

After the Cybersecurity for Building Automation: BMS and BACnet course: Explain how buildings have been hacked and why a BMS can be a way into the business; Describe BMS architecture and find the weak points in BACnet, Modbus and MS/TP networks; Harden controllers, servers and accounts in the building's priorities. These are the practical outcomes the course is written around, and the final assessment of 15 questions checks them.

For the Cybersecurity for Building Automation: BMS and BACnet course, software: None required. Wireshark (free) is useful for looking at BACnet traffic on a test network you own. Hardware: none. A spare BACnet controller on a bench network makes the hardening exercises more real. The course itself is free.

Cybersecurity for Building Automation: BMS and BACnet is rated intermediate. Intermediate. You should know what a BMS does and have basic networking knowledge: IP addresses, subnets and VLANs. Experience with BACnet or Modbus helps but is not required. It is written for BMS engineers, facility managers and integrators, and has 5h 11m of video lessons at your own pace.

Skills from the Cybersecurity for Building Automation: BMS and BACnet course (for example: explain how buildings have been hacked and why a BMS can be a way into the business) are used in OT security engineer work. The course gives you practical evidence of the skill; it does not promise a job, and employers decide on experience and interview.