Sara Hampf

Przejdź do strony wsparcia

Dowiedz się, jak skonfigurować uwierzytelnianie wieloskładnikowe dla konta Kiona

Product Marketing

sara-adolfsson-hampf-2

Sara-Adolfsson-Hampf

Zarządzanie budynek

field_62613e1328887

acf/block-article-link

Explore our products and solutions for building management

<p>With the rise of Proptech, buildings are becoming increasingly interconnected through networks and IoT devices – and generate vast quantities of data. While this data can improve facility operations and efficiency, it also introduces big security risks if not properly safeguarded.</p>



<p>Consider the following scenario: Unauthorized individuals have managed to gain initial access to a system and gradually escalated their privileges through careful maneuvering, thus obtaining increasingly broader access to systems and sensitive data.</p>



<h2 class="wp-block-heading" id="h-why-is-cybersecurity-a-question-for-buildings">Why is cybersecurity a question for buildings?</h2>



<p>Every organization today stores sensitive data in some form or another. Smart buildings require building owners to understand the organization's data security needs as operations move to the cloud. Building systems are also collecting and storing more data than before – becoming even more attractive to attackers.</p>



<p>"It goes beyond the mere loss of data or the immediate financial impact of mitigating or containing an attack. The true reality is far more complex, and every organization must recognize the combined risks associated with reputational damage. Such damage can not only jeopardize new contract opportunities but also impact existing contractual agreements," says John-Helge Gantz, Information Security Manager at Kiona.</p>



<p>"Moreover, the consequences of non-compliance with or breaches of data protection regulations can have a profound and lasting impact on the overall financial sustainability of an organization."</p>





<p>Therefore, building owners need control over who can access data and how it is stored and protected by, for instance, third parties.</p>



<h2 class="wp-block-heading" id="h-local-installation-or-cloud-solution">Local installation or cloud solution?</h2>



<p>One common question when it comes to data security in buildings is whether it is better to use a local installation or a cloud-based solution. The truth is that there is no one-size-fits-all answer to this question. Both options have pros and cons, and the security of each will depend on how well they are configured and maintained.</p>



<p>To compare the two, you have to work on the assumption that you have a local installation that is perfectly configured and a cloud solution that is perfectly configured. In that case, there is no big difference in basic security. It all comes down to how you handle moving from only managing technical equipment to taking on the IT role.</p>



<h2 class="wp-block-heading" id="h-how-can-you-work-with-security-in-your-facility">How can you work with security in your facility?</h2>



<p>With more than 55 000 buildings connected, we generate several billion data points every day, so it's safe to say cyber security is vital to us.</p>





<p>Implementing access control, using strong encryption to protect data, regularly updating software (and patching vulnerabilities), and training employees on best practices for data security, are some of the efforts you should pay attention to at your end.</p>



<h3 class="wp-block-heading" id="h-no-solution-is-more-secure-than-the-weakest-link">No solution is more secure than the weakest link</h3>



<p>And the weakest link is typically us humans. That's why it's essential to keep access control in mind. This will help ensure that only authorized personnel have access to your building's data and that a breach doesn't come from one of your passwords being found in a leak. To keep the bad guys out – you need a password strategy.</p>



<p>By implementing Multi-Factor Authentication (MFA), you add an additional layer of security. This reduces the system's likelihood of breaches based on human interactions, emotions, and blind trust.</p>



<figure class="wp-block-image size-large"><img src="https://kiona.com/app/uploads/2023/05/John-Helge-office-AI-generated-1024x611.jpg" alt="AI generated photo of office in a building" class="wp-image-38855"/><figcaption class="wp-element-caption">A picture is worth a thousand words, but with new tools, you can't be sure that what you see is the truth. The office in the background is entirely generated by AI. The flowers on the desk never existed. In the red shirt, John-Helge is real and works daily with security issues at Kiona.</figcaption></figure>



<h3 class="wp-block-heading" id="h-data-processing-agreements-dpa">Data processing agreements (DPA)</h3>





<p>The <a href="https://gdpr.eu/what-is-gdpr/" target="_blank" rel="noreferrer noopener">General Data Protection Regulation (GDPR)</a> in Europe, the California Consumer Privacy Act (CCPA), and other regulations have increased the focus on protecting personal data. And as a building owner who shares data with others, the division of responsibilities must be clear.</p>



<p>With a Data Processing Agreement based on the GDPR regulations, you have a secure starting point for an agreement with a supplier and a good knowledge of how data is handled.</p>



<p>A DPA establishes clear guidelines for a supplier's handling, storage, and data processing. It ensures that each party understands its responsibilities for data protection and implements security measures to prevent loss or misuse of data.</p>



<h3 class="wp-block-heading" id="h-minimize-risk-with-regular-updates">Minimize risk with regular updates</h3>



<p>Finally, it's important to keep your software up to date. Software updates often include patches for security vulnerabilities, so by keeping your software up to date, you can make sure that your building's data is as safe as possible.</p>



<p>Remember to stay aware of your exposure and attack surfaces. When you minimize the organization's exposure, you also decrease the threats and risks it faces.</p>

The building as a data source

Jak działa uwierzytelnianie wieloskładnikowe (MFA)?

<p>Szacunki pokazują, że każdego dnia co 44 sekundy dochodzi do cyberataku. To przerażająca liczba i oczywiście wpływ ataku może być ogromny, niezależnie od wielkości firmy. Koszt cyberataku na Twoją firmę/organizację będzie bardzo wysoki, nie wspominając o czasie i wysiłku potrzebnym do odzyskania funkcjonalności. Sytuacja może również prowadzić do utraty zaufania, jakim darzą Cię klienci. Koniec końców – nie warto.</p>

<p>Większość firm posiada systemy online, które pozwalają użytkownikom zalogować się w celu zrobienia zakupów i wykonania transakcji bankowych, sprawdzenia statusu zużycia energii elektrycznej w budynku itp. Nazwy użytkowników i hasła są niezbędne, ale same w sobie mogą być podatne na ataki i skradzione przez osoby trzecie lub wykorzystane w cyberatakach.</p>

<p>Możesz nawet nie wiedzieć, że Twoje dane uległy naruszeniu, ponieważ są one przechowywane w narzędziu obsługiwanym przez inną firmę, które właśnie zostało zhakowane.</p>

<h2 class="wp-block-heading" id="h-how-does-multi-factor-authentication-mfa-work">Jak działa uwierzytelnianie wieloskładnikowe (MFA)?</h2>

<p>Podczas logowania do nowego smartfona, konta online lub VPN, MFA prosi użytkownika o identyfikację za pomocą nie tylko nazwy użytkownika i hasła. Najczęstszą metodą są hasła jednorazowe. Są to 4–8-cyfrowe kody przesyłane za pośrednictwem poczty e-mail, wiadomości SMS lub aplikacji mobilnej.</p>

<p>MFA zmniejsza ryzyko udanego cyberataku i pomaga firmom i osobom prywatnym chronić ich informacje.</p>

<figure class="wp-block-image size-large"><img src="https://kiona.com/app/uploads/2023/06/News-ticker-MFA-authenticationEN-1024x512.png" alt="Multi-factor authentication (MFA) at Kiona" /></figure>

<p>Rozważ uwierzytelnianie wieloskładnikowe w formie odcisku palca lub fizycznego klucza sprzętowego, dzięki którym Twoja organizacja będzie chroniona przed cyberprzestępcami.</p>

<p>Wprowadzając uwierzytelnianie wieloskładnikowe, dodajesz dodatkową warstwę zabezpieczeń, aby chronić swoją firmę.</p>

<p>W Kiona bezpieczeństwo jest bardzo ważne, a <a href="https://kiona.com/story/blog/simplified-login-and-strengthened-security-sso">MFA jest zintegrowane ze wszystkimi naszymi rozwiązaniami</a>, dzięki czemu Twoja decyzja o inwestycji w nasze platformy jest bezpieczna.</p>

Dodaj dodatkową warstwę zabezpieczeń, wprowadzając uwierzytelnianie wieloskładnikowe