Cybersecurity · Free online course

Cybersecurity for Building Automation: BMS and BACnet

Secure the building management systems you design, install or run: real building hacks, BMS network architecture and its weak points, hardening controllers and front ends, secure design with zones and conduits, BACnet Secure Connect, defence in depth for BACnet/IP, secure vendor remote access and zero trust.

  • 9 modules
  • 5h 12m of video
  • Intermediate
  • English
  • ₹0, free
Cybersecurity for Building Automation: BMS and BACnet course cover

₹0Free for good

Worth ₹3,499 by length and depth against classroom training. It has always been free; that is not a former price.

No card. Checkout takes a minute and gives you a receipt.

Overview

About Cybersecurity for Building Automation: BMS and BACnet

Secure the building management systems you design, install or run: real building hacks, BMS network architecture and its weak points, hardening controllers and front ends, secure design with zones and conduits, BACnet Secure Connect, defence in depth for BACnet/IP, secure vendor remote access and zero trust.

Cybersecurity for Building Automation: BMS and BACnet is a free, self-paced online course from EDWartens for BMS engineers, facility managers and integrators. It has 9 modules and 5h 12m of video lessons by Instrumentation Tools, Siemens Knowledge Hub, BACnet International and others, with written notes and worked problems, a practical project with a document pack and a 15-question final assessment (pass mark 60%). Learning is free with an account; an optional certificate with a public verification code is issued when you pass. Last updated 27 September 2026.

Who it is for: BMS engineers, facility managers and integrators

This course includes

  • 5h 12m of video lessons
  • 9 modules with written notes and diagrams
  • One final assessment: 15 questions, pass mark 60%
  • Ask-an-engineer support from practising engineers
  • Lifetime access, the course does not expire
  • Optional verifiable certificate when you finish
  1. Step 1 of 3

    Learn the 9 modules

    5h 12m of video lessons, written notes and a practice task per module, at your own pace.

  2. Step 2 of 3

    Pass the final assessment

    15 questions drawn from every module, pass mark 60%, 3 attempts.

  3. Step 3 of 3

    Take the certificate, if you want it

    Optional, paid once, only if you choose it. The course stays free either way.

    See the certificate and its price

A look inside

Cybersecurity for Building Automation: BMS and BACnet: Syllabus at a glance
Syllabus at a glance
Cybersecurity for Building Automation: BMS and BACnet: What you will be able to do
What you will be able to do
Cybersecurity for Building Automation: BMS and BACnet: Tools and credits
Tools and credits

From the lessons

  • 5 smart buildings that got hacked

    Buildings that got hacked

    by IFSEC Insider

  • BMS Networking and Cyber Security | Protecting Modern Building Systems

    How a BMS network is built, and where it is weak

    by Aayat Technical

  • SBA 405: Cyber Security for Building Automation Part 1

    Cyber security for building automation

    by Smart Buildings Academy

  • Designing Cyber Secured Building Management Systems

    Designing a secure building management system

    by Kaspersky

  • Bridge the cybersecurity gap with BACnet Secure Connect

    BACnet Secure Connect

    by Siemens Knowledge Hub

  • Cybersecurity for BACnet BAS Systems

    Securing BACnet systems in depth

    by BACnetInternational

Lesson frames belong to the creators named in the Credits and are shown from YouTube.

What you learn

What you will be able to do

Explain how buildings have been attacked and why the BMS can be a way into the business; describe a BMS network from management to field level and find its weak points; harden controllers, servers and workstations; design a secure BMS with zones, conduits and security requirements in the specification; explain and plan BACnet Secure Connect with its hubs and certificates; secure existing BACnet/IP systems in depth; design secure vendor remote access; and plan the move to authenticated, authorised and audited BACnet.

  • Explain how buildings have been hacked and why a BMS can be a way into the business
  • Describe BMS architecture and find the weak points in BACnet, Modbus and MS/TP networks
  • Harden controllers, servers and accounts in the building's priorities
  • Design a secure BMS with IEC 62443 zones, conduits and specification clauses
  • Explain and plan BACnet Secure Connect with hubs and certificates
  • Secure existing BACnet/IP systems in depth
  • Design secure, time-limited vendor remote access
  • Plan authorisation, audit logging and a phased migration

Syllabus

Course content, module by module

In order, at whatever pace suits you. Each module ends with a practice task that builds on the last.

Modules
9
Video lessons
17
Of video
5h 12m
Final questions
15
  1. 01

    Buildings that got hacked

    4 lessons · 17m
  2. 02

    How a BMS network is built, and where it is weak

    2 lessons · 15m
  3. 03

    Cyber security for building automation

    1 lesson · 50m
  4. 04

    Designing a secure building management system

    1 lesson · 28m
  5. 05

    BACnet Secure Connect

    3 lessons · 1h 2m
  6. 06

    Securing BACnet systems in depth

    1 lesson · 59m
  7. 07

    Segmentation, remote access and zero trust

    3 lessons · 22m
  8. 08

    Where BACnet security is going

    1 lesson · 59m
  9. Final assessment · 15 questions, pass mark 60%

Project

The course project

Optional practice that ends in the kind of job the course prepares you for, with the documents that go with it.

About 10 hours

Securing the BMS of a Lagos office tower: asset inventory, zones and conduits, risk register and BACnet/SC migration plan

Assess and secure the building management system of a 14-storey office tower as the BMS security engineer: list every connected building asset, draw the zones and conduits, register the risks, and plan the hardening, remote access changes and move to BACnet/SC. The sample pack shows each document for a tech park tower in Lagos. Work from drawings and your own bench equipment; never scan or change a live building without the owner's written permission.

Sample document pack, 4 documents, filled in for the scenario

  • Asset inventoryBMS asset inventory: Coastline Tech Park Tower B
  • Zones & conduitsZones and conduits: Tower B BMS
  • Risk registerBMS risk register: Tower B
  • PlanBMS hardening, remote access and BACnet/SC migration plan: Tower B

Read inside the course and download as a workbook. The project is optional practice, marked when you submit it; the certificate needs only the modules and the final assessment.

Tools

Software, hardware and lessons

Software

None required. Wireshark (free) is useful for looking at BACnet traffic on a test network you own.

Hardware

None. A spare BACnet controller on a bench network makes the hardening exercises more real.

Who it is for

Intermediate. You should know what a BMS does and have basic networking knowledge: IP addresses, subnets and VLANs. Experience with BACnet or Modbus helps but is not required.

Video lessons by

  • Instrumentation Tools
  • Siemens Knowledge Hub
  • BACnet International
  • Smart Buildings Academy

Independent creators, credited in full under Credits.

Software you need

What to download, where from, what it costs and how to install it. Every link goes to the maker's own site, never a mirror.

Nothing is required

Wireshark is useful for looking at BACnet traffic on a test network you own.

Optional

Useful, not needed to finish the course.

  1. 01

    Wireshark

    Wireshark Foundation

    Free
    Runs on
    Windows 11 or 10 64-bit (x64 or Arm64), Windows Server 2016 or later, macOS (Universal disk image), Linux
    Account
    None needed

    Free, open source software. No licence fee for any use.

Checked against each maker's own page on 27 September 2026. Trial lengths and editions change; the maker's page is the final word.

What you walk away with

Your certificate for Cybersecurity for Building Automation: BMS and BACnet

Finish the course, pass the final, and this is the document with your name on it.

Sample Wartens Certificate of Completion for Cybersecurity for Building Automation: BMS and BACnet, issued through the EDWartens training portal
Sample. The issued certificate carries your name, your final score, a unique certificate ID and its own QR code.
  • Verifiable by anyone

  • Adds to LinkedIn in one click

  • QR code on the certificate

  • Names what you can do

  • A permanent link

  • Earned, not attended

Learning is free. The certificate is optional.

Add it now and pay only when you have finished the course, or come back for it later. One-off, US$28.99, with a receipt.

Issued by Wartens Ltd (England and Wales, company no. 15262249) through the EDWartens training portal, as a Certificate of Completion for this self-paced course. Sold in India by Wartens Automation Private Limited. It is not a vendor certification, a university award or a CPD-accredited activity, and it does not certify competence on live equipment. Delivered electronically; see the refund policy.

FAQ

Common questions

Who is the Cybersecurity for Building Automation: BMS and BACnet course for?

BMS engineers and technicians, system integrators, facility managers, MEP consultants and OT or IT security staff who look after building systems. Basic networking knowledge is assumed.

Is this a hacking course?

No. It teaches people responsible for buildings to protect them. There are no techniques for attacking systems, and the course warns against testing live buildings without written permission.

Is it tied to one BMS vendor?

No. It is about BACnet, Modbus and the design of any BMS. Siemens and other companies' lessons are used where they explain the ideas well, credited on each module, and none of them is affiliated with EDWartens.

Do I need BACnet/SC equipment?

No. The course explains BACnet/SC from the lessons and the standard's principles. If you have a controller that supports it, the bench exercises become more real.

Is the Cybersecurity for Building Automation: BMS and BACnet course really free?

Yes. Every module, the notes, the project and the final assessment. The only paid item is the certificate, if you want it.

What certificate does the Cybersecurity for Building Automation: BMS and BACnet course give?

An EDWartens Certificate of Completion, issued when you pass the final assessment, with a number anyone can verify on our site. It is not a BACnet International or ASHRAE certification.

How long does the Cybersecurity for Building Automation: BMS and BACnet course take?

About 8.1 hours of video lessons, notes and practice questions, plus about 10 hours if you do the project. At an hour a day, that is about two and a half weeks.

What is the project in the Cybersecurity for Building Automation: BMS and BACnet course?

You assess the BMS of a 14-storey office tower in Lagos, Nigeria, whose tenant wants evidence that the building's systems are secure. You write an asset inventory, a zones and conduits model, a risk register, and a plan for hardening, vendor remote access and a phased move to BACnet/SC.

Is the Cybersecurity for Building Automation: BMS and BACnet course free in India, and what does the certificate cost?

Yes. Learning costs ₹0 in India: every module, the written notes, the practice tasks and the final assessment, with no card and no trial period. The only paid item is the optional EDWartens Certificate of Completion, ₹599 including GST for this intermediate course, paid in rupees through Razorpay, and only if you want it after passing the final assessment.

All course facts
Price
₹0, free for good. No trial, no card. Comparable classroom training of this length costs about ₹3,499.
Who it is for
BMS engineers, facility managers and integrators
Format
9 self-paced modules, 5h 12m of video, written notes, a practice task per module and one final assessment.
Level
Intermediate. Intermediate. You should know what a BMS does and have basic networking knowledge: IP addresses, subnets and VLANs. Experience with BACnet or Modbus helps but is not required.
Brand
Vendor-neutral
Software
None required. Wireshark (free) is useful for looking at BACnet traffic on a test network you own.
Hardware
None. A spare BACnet controller on a bench network makes the hardening exercises more real.
Certificate
Optional EDWartens Certificate of Completion, ₹599 inclusive of GST for learners in India, verifiable by code. Not a vendor credential.
Video lessons by
Instrumentation Tools, Siemens Knowledge Hub, BACnet International, Smart Buildings Academy (independent creators, credited below)
Language
English
Last updated
27 September 2026

More free courses: Free cyber security courses · Free BMS and building automation courses · Free OT and ICS security courses

Classroom course, Bangalore

PLC training in Bangalore

The Automation Engineer Program (AEP) is our classroom course in PLC programming and industrial automation, taught in person at our Electronic City centre.

Credits

Who made the video lessons

The video lessons in this course were created by the people below, not by EDWartens. Every lesson streams from its creator's own YouTube channel; EDWartens neither hosts nor sells that footage, and the creators are not affiliated with EDWartens and do not endorse this course. What EDWartens wrote is the study plan, the notes, the practice tasks and the assessments.

If you are one of these creators and would like a lesson removed or credited differently, write to info@wartens.com.