Improve resilience, recovery and security after operational control is established.
Many landlord networks have evolved over time. They may include ageing hardware, unsupported servers, undocumented dependencies and remote access methods that no longer meet modern operational or security expectations.
IT4Automation helps clients modernise these environments safely, from server virtualisation and backup improvement to OT network segmentation, using a phased approach that reduces disruption to live building operations.
Replacing landlord network infrastructure without understanding system dependencies can create risk. A commercial building’s OT network carries the operational technology that keeps the building running, and building systems may depend on:
A rushed replacement can affect live building operations. IT4Automation’s approach is to establish visibility and operational control first, then modernise in controlled phases. That is the same principle behind our Landlord Networking service: take control first, modernise safely second. Many clients begin with Managed Support for Landlord Networks and move to modernisation once the environment is stable.
We help clients move from risk and uncertainty to a managed improvement plan. Delivery follows the IT4Automation project process used across our Supply foundation.
Confirm assets, dependencies, support status, backup arrangements and known risks.
Establish monitoring, documentation, support processes and risk management.
Identify the most important lifecycle, resilience, security and recovery improvements.
Develop a practical improvement plan that fits the building’s operational needs.
Implement change in controlled phases with rollback planning and specialist contractor coordination.
Every building is different, but the same opportunities appear in most landlord OT environments. Landlord network modernisation may include:
We prioritise these against operational risk, so the changes that protect critical building services and the most important OT assets come first.
Many building systems still rely on individual physical servers, often running legacy OT systems installed years ago. A single server failure can interrupt an important building service and may require hardware repair or rebuild before normal service can resume.
IT4Automation can help assess whether building-system servers are suitable for virtualisation or high-availability hosting, delivered through our Host foundation and secure OT data centre. Potential benefits include:
Modernisation is not only about replacing equipment. It is also about understanding what can be recovered when something fails. IT4Automation can help improve:
The result is Assurance: evidence that the operational technology behind your building can recover and remain supportable.
Landlord networks often grow as new systems are added. Over time, this can lead to unclear network separation and complex access arrangements, with OT devices from several contractors sharing flat networks. IT4Automation can help review and improve:
Better OT network security reduces the chance that a fault or cyber threat in one system spreads to another, and makes it easier to show tenants and auditors how critical building services are protected.
OT network segmentation is the practice of dividing an OT network into separate zones, so each group of building systems can only communicate with the systems it needs. Building systems are a form of operational technology (OT): like the industrial control systems (ICS), distributed control systems, supervisory control and data acquisition (SCADA) systems and programmable logic controllers used in industrial operations, they control physical processes in the physical world, from heating and ventilation to doors and lighting.
As IT OT convergence brings these control systems onto shared networks and cloud services, OT network segmentation becomes one of the most effective ways to protect them. The same principles used to secure industrial networks in ICS security apply to building OT networks and the critical infrastructure tenants they serve. In a landlord network they come down to three rules:
Keep building OT systems apart from the corporate IT network and tenant IT systems, with firewall control at each boundary.
Give BMS, access control, CCTV, lighting and metering their own segments, so network traffic is limited to what each service needs.
Route contractor remote access through controlled, monitored paths such as ZTRAS, IT4Automation’s zero trust remote access service, instead of open VPNs.
OT security protects the systems that keep a building safe, comfortable and open. When OT systems fail or are compromised, the result is not lost data but operational disruption: a building that cannot control access, maintain temperatures or keep critical services running.
Many commercial buildings now host tenants who run critical infrastructure, and their security teams increasingly ask landlords for evidence about OT networks. Regulatory pressure from NIS, the NCSC Cyber Assessment Framework (CAF) and the Cyber Security and Resilience Bill is growing. The OT security challenges we see most often in building OT environments are:
None of these can be fixed with security tools or a single product. OT cyber security in buildings needs a planned modernisation programme that combines OT network segmentation, access control, monitoring and documentation, delivered without disrupting live building operations.
OT security in a commercial building is different from securing an IT network. OT environments prioritise availability: a BMS server or access control panel cannot be taken offline for a patch window like an office laptop. Many OT assets are legacy OT systems that cannot be updated, so segmentation and controlled access act as compensating controls.
Good OT network segmentation starts with knowing what is on the network, which is why discovery comes first. A typical segmentation project covers:
Segmentation is planned with the specialist contractors who look after each system and with tenant IT teams, so OT networks stay secure without blocking essential maintenance. Ongoing monitoring is available through our Protect foundation.
Landlord network modernisation draws on all four IT4Automation foundations to deliver Visibility, Control and Assurance.
Product supply, design, engineering delivery, infrastructure refresh and project support.
Secure OT data centre, server hosting, virtualisation, backup and recovery support.
Landlord networks, network segmentation, secure remote access, ZTRAS and resilient connectivity.
Monitoring, alerting, security event visibility, incident triage, reporting and risk management.
IT4Automation has designed, delivered and supported landlord networks in some of London’s most demanding commercial properties.
A 12-floor building with up to 12 segmented building services on one resilient network, supported by IT4Automation for 16 years with 24/7 monitoring.
Three managed office buildings across 44 floors, with two Critical National Infrastructure tenants, designed to NCSC CAF and delivered by NPPV3/SC-cleared engineers.
IT4Automation combines IT infrastructure capability with operational technology and building services experience.
Accreditations: UKAS-accredited ISO 9001, ISO 14001, ISO 45001 and ISO 27001, Cyber Essentials, SafeContractor and Constructionline Gold.
OT network segmentation divides an operational technology network into zones, with controlled conduits between them. In a commercial building, it means the BMS, access control, CCTV, lighting and metering each sit in their own segment, separated from each other and from the IT network, so a problem in one system cannot easily reach the others.
An OT network connects the operational technology that controls physical processes. In a building, that means the controllers, servers, workstations and OT devices behind building management, access control, lighting, metering and other building services. Office computers and email run on a separate IT network, and the two should be kept apart by firewalls.
IT networks prioritise data confidentiality and data security, and change frequently. OT networks prioritise availability and safety, because they control physical equipment. They often run legacy systems for many years and cannot simply be patched or restarted. That is why OT security needs both IT and OT teams, and careful planning around live operations.
IT OT convergence is the growing connection between operational technology and IT systems, for example building systems that report to cloud dashboards or share infrastructure with corporate networks. It brings better operational data and enhanced operational efficiency, but also new cyber threats, which segmentation and controlled remote access help to manage.
Often, yes. IT4Automation assesses each server, its software, licences and dependencies to confirm whether it is suitable for virtualisation or high-availability hosting, and agrees the approach with the specialist contractor before any change.
Our approach is designed to avoid that. We establish visibility and control first, then deliver change in controlled phases with rollback planning and specialist contractor coordination. A one-building OT infrastructure risk review is the usual starting point.
IT4Automation visited to perform a network survey and assisted with troubleshooting a network issue… I was very pleased with the service that IT4Automation provided and would certainly contact them again in the future if needed.
Stuart Jolley – S,C&I Engineer, Systems Lead
Great communication, reliable and your team… worked pretty much non stop start to finish. I think this upgrade has made a good improvement to the machine and will improve reliability.
George Voisey – Balfour Beatty Rail
IT4Automation can help you assess the current environment, prioritise risk and develop a phased modernisation plan that protects live building operations.
