The Solution

Overview

Totem is a Software as a Service (“SaaS”) solution for cybersecurity assessments, compliance monitoring and asset management of building controls systems such as HVAC, lighting, elevator, security, parking, and others.

[More...]

This solution brings an automated approach to the critical risks in building control systems related to human behavior which account for approximately ¾ of all cybersecurity incidents, and can be divided into employee risk management and vendor risk management (VRM).

Totem is a multi-functional tool that gives you frontline tactical protections along with practical inventory data and backups as well as strategic reporting across the organization. This solution scales across all building controls systems and all manufacturers and provides constant, low-cost, high value protection for owners and facility managers.

;

TOTEM BROCHURE

;

WHITEPAPER: Cybersecurity for OT vs. IT

Offerings

Totem Assessment Service

This service provides a detailed review of the client’s building controls OT environment from a cybersecurity perspective including a risk score based on the 5-part government NIST standard which is the most widely accepted cybersecurity risk framework.

Totem Commissioning Service

For new construction projects, the Totem Commissioning Service validates if the various building control system suppliers have designed and installed their products in accordance with the building OT cybersecurity best practices and if applicable, specific policy and profiles that were established at the onset of the project.

Totem Monitoring Service

This  service offering provides monitoring of the client’s building systems in order to detect changes in set up and configuration that do not comply with best practices and specific policies.  In addition, the service will identify if system software is current and automatically maintains an asset inventory of all building control devices that typical assets management systems do not track.

System Setup

Configuration Files: A key element of the Totem software suite in each of the offering types is the configuration file data analytics engine, which houses key information and metrics about contractor policy behavior and compliance that is the most significant risk for cybersecurity vulnerability. Even behind gateways, firewalls and other network provisions, a contractor can disfigure the cybersecurity posture of the entire system either unintentionally or maliciously.

Configuration Attributes include:

  • Password strength and age
  • Orphan or unused logins/passwords
  • Shared logins/passwords
  • Authorized users
  • Password strength and age
  • Orphan or unused logins/passwords
  • Shared logins/passwords
  • Authorized users
  • Access rights including administrative privileges
  • Software revision level and patching status
  • End of life system and software
  • Backup status
  • Access rights including administrative privileges
  • Software revision level and patching status
  • End of life system and software
  • Backup status

The Totem Solution will provide a range of strategic and tactical information for real estate executives and managers

ACCESS: Who has access, what levels or permissions, and a record of use

ASSETS: Inventory of systems, devices, and software versions

BACKUP: Current backup of the system for easier, faster restoration

PATTERNS: Unusual traffic in the building, portfolio, or externally (optional)

ORGANIZATION: Reporting for process controls and regulatory compliance

Ready to Make Your Building a Totem Building?