October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
Bettesworth Construction
BACnet

The Missing Tech Foundations for Smart Buildings

A smart building needs more than connected devices. Start with interoperable controls, trustworthy data, secure connections, reliable sensing and commissioning, then build toward energy optimization and grid interaction.

By Bettesworth Construction Team 7 min read
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The technology most often missing from a smart building is not another dashboard or AI tool. It is the foundation that makes building systems interoperable, their data trustworthy, their connections secure, and their performance measurable. For a retrofit or new construction project, establish those basics before adding advanced optimization or grid services.

What a smart building needs beneath the dashboard

A building can have connected HVAC, lighting, access control, meters, and analytics yet still be difficult to operate as one system. The key question is whether the equipment can exchange useful information reliably, whether operators can understand that information in context, and whether controls continue to behave safely when a network or cloud service is unavailable.

For owners, designers, contractors, and facility teams, the foundation is a coordinated stack: interoperable communications; consistently named and contextualized data; secure OT/IT connections; reliable sensing, metering, and control; and commissioning and lifecycle ownership that verify the intended outcomes.

Start with interoperable controls, not a single-vendor promise

HVAC, lighting, access control, elevators, security, and fire detection may come from different manufacturers. A shared protocol can make their control equipment communicate, but specifying a protocol alone does not guarantee that every device, point, or function will work together as intended.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What BACnet does—and does not—solve

BACnet is a widely used standards anchor for building automation. The BACnet Committee describes it as a vendor-independent networking solution for interoperability among equipment and control devices. It defines communication services and protocols and an object-oriented representation of exchanged information. The standard is maintained by ASHRAE and published as ISO 16484-5. It was first published as ANSI/ASHRAE Standard 135 in 1995 and became an ISO standard in 2004, according to the committee’s 2026 overview.

BACnet provides a common communications framework; it does not, by itself, ensure consistent names, complete point lists, sensible control sequences, secure remote access, or useful histories. Those need to be specified, implemented, and tested separately.

Put interface requirements in the construction documents

Require each controls vendor and integrator to document the interfaces they will deliver, rather than relying on a general promise of “open” or “integrated” systems. The project requirements should identify:

  • Supported protocols, device and object types, and any gateways or proprietary interfaces.
  • Complete points lists, including units, writable status, command priorities, alarm conditions, and trend requirements.
  • How schedules, alarms, trends, and operator commands will behave across vendor boundaries.
  • What data can be exported, in what format, and whether the owner can access it without a vendor-specific subscription.
  • Conformance evidence and integration tests for the actual devices and functions being installed.

Independent BACnet Testing Laboratories conformance testing is a useful procurement and commissioning signal. It should support—not replace—project-level testing of the specified equipment, points, sequences, and cross-system interactions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Make building data understandable and usable

Connected points are not automatically useful data. A temperature value without a clear equipment relationship, unit, timestamp, or location can be difficult to interpret; inconsistent naming can make the same asset appear to be several unrelated things. That weakens dashboards, alarms, energy analysis, and any later analytics or AI built on top of them.

Define a data model before equipment is installed. At minimum, decide how assets and points will be named; which units and timestamps will be used; how systems, floors, zones, and equipment relate; which histories must be retained; and how the owner will receive the data at handover. Require the controls contractor to deliver an accurate, maintainable point and asset register, not just a screen full of live values.

ISO 37173:2023 provides guidance for developing smart-building information systems in the context of smart-community infrastructure. It is a useful reference for the information-system layer, not a substitute for project-specific decisions about point naming, data access, retention, or integration.

Design cybersecurity into the OT/IT boundary

Building controls are operational technology: they monitor and affect physical equipment and services. Connecting them to business networks, remote support, cloud platforms, or grid programs can create new paths to those systems. The U.S. Department of Energy’s Federal Energy Management Program warned in its 14 October 2024 cybersecurity fact sheet that interconnected systems without appropriate cybersecurity practices can create security gaps and potential attack paths.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Include the building’s controls and connected services in the project’s cybersecurity design from the outset. The scope should address:

  • An asset inventory covering controllers, gateways, workstations, connected devices, and external services.
  • Network segmentation and rules for traffic between building controls, enterprise IT, vendors, and cloud services.
  • Identity and access management, including named accounts, least-privilege access, and a controlled process for removing access when roles change.
  • Secure remote access, with defined approval, authentication, logging, and support arrangements.
  • Patch and vulnerability management, monitoring, incident response, and backup and recovery responsibilities.

NIST’s Cybersecurity for Building Systems project describes work with industry to develop cybersecurity approaches and application profiles for modern digital buildings. Treat that as evidence that standards-based approaches are being developed, not as a claim that one profile or product is universally required. Specify the security practices and operational responsibilities your project needs, then verify them at handover.

Make sensing, metering, and command paths dependable

Energy and comfort outcomes depend on more than analytics. Sensors need to measure what they are supposed to measure; meters need to capture the loads the owner intends to manage; and commands need to reach the equipment and produce the intended response. Incomplete points, uncalibrated sensors, stale trends, or unreliable command paths can make a polished dashboard misleading.

Before acceptance, verify the points list against installed equipment and intended sequences. Check sensor calibration and placement against project requirements, confirm meter coverage and units, and test commands and alarms at the device and operator interface. Trend the data needed to see whether systems actually respond as expected.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4

Specify safe local operation for loss of upstream analytics, network connections, or cloud services. Operators should have a defined way to keep essential functions running and to override controls safely when necessary. Cloud optimization may add capability, but basic building operation should not depend on an uninterrupted connection to it.

Build energy management and grid interaction on measured performance

DOE identifies smart-enabled devices, remote operations, analytics, and demand flexibility as technologies that can reduce energy use and provide grid services in federal and commercial facilities. Those capabilities are most useful when a building first has dependable measurements and controllable loads.

Establish the baseline and operational goals that matter to the owner—such as energy use, peak demand, comfort, indoor air quality, safety, uptime, or maintenance response—then add optimization or grid-interactive functions that can be tested against them. There is no universal savings percentage that applies to every smart-building project: outcomes depend on baseline conditions, controls quality, commissioning, occupancy, climate, and ongoing operations.

Compare the approaches against the building’s needs

A traditional BMS upgrade, a multi-vendor interoperable architecture, and a cloud-connected or grid-interactive approach solve different problems. Compare proposed designs on the same criteria rather than assuming that a newer or more connected option is automatically better.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Approach What to evaluate Questions for the project team
Traditional BMS upgrade Replacement or extension of existing building-management controls and operator functions. Which existing systems and points are included? Are interfaces, exports, alarms, histories, and command behavior documented? What remains dependent on proprietary components?
Interoperable multi-vendor architecture Integration of equipment and controls from multiple vendors using documented interfaces and a defined data model. Are the actual devices and functions tested together? Are naming, units, priorities, trends, and responsibility for gateways agreed? Can the owner access and export the resulting data?
Cloud-connected or grid-interactive approach Remote operations, analytics, or demand flexibility layered on the building’s controls and data. What connectivity and data access are required? What security and support responsibilities apply? Which functions remain available locally during an outage, and how will performance be measured?

For any approach, score interoperability, security and maintainability, data usefulness, operational outcomes, resilience, and total cost and capability. Include integration, commissioning, training, subscriptions, and the staff skills needed to operate the system—not only equipment and installation.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Specify commissioning and lifecycle ownership before handover

Commissioning should demonstrate that the installed system performs the intended functions, not simply that devices power on and appear on a network. Make acceptance testing traceable to the contract documents and include cross-system interactions, trend data, alarms, operator workflows, cybersecurity controls, and safe response to loss of communications where relevant.

The European Commission’s Directorate-General for Energy published technical assistance on building automation and control systems on 2 May 2023, with guidance for authorities and building professionals on BACS capabilities, technical requirements, and performance assessment. Use performance assessment as a project discipline: state what success means, identify how it will be measured, and assign responsibility for checking it.

Before handover, document who owns and maintains the following:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • System diagrams, configurations, sequences, points lists, credentials, and backups.
  • Data, histories, integrations, export access, and any subscriptions or external services.
  • Security updates, monitoring, remote access approval, and incident response.
  • Warranties, training, support escalation, and future changes to equipment or integrations.
  • Ongoing review of energy, comfort, safety, uptime, and maintenance outcomes.

These responsibilities should be agreed among the owner, design team, controls contractor, integrator, commissioning provider, and any service vendor while the project is being scoped. If ownership is left until closeout, gaps in access, maintenance, or support may be difficult to resolve after the project team disperses.

A practical sequence for a smart-building retrofit

  1. Set outcomes and boundaries. Identify the building functions and operational outcomes in scope, the systems to connect, and what must continue to work during network or cloud outages.
  2. Inventory the existing estate. Record equipment, protocols, points, gateways, networks, meters, data access, and known operational constraints.
  3. Specify interfaces and data. Define protocol and conformance expectations, points and command behavior, naming, units, timestamps, histories, and owner export access.
  4. Approve the security architecture. Establish segmentation, access, remote support, patching, monitoring, and incident-response responsibilities before connections are enabled.
  5. Install and test the fundamentals. Verify sensing, metering, control sequences, alarms, trends, interfaces, local fallback, and operator workflows against the project requirements.
  6. Add optimization only after the data and controls are trustworthy. Evaluate energy-management, analytics, and grid-interactive functions against a defined baseline and measurable owner goals.
  7. Close out for operations. Transfer the documentation, access, backups, training, warranties, data rights, and lifecycle responsibilities needed to maintain the system.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Site Office

Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.