Cybersecurity

Are there any ports open to the internet?

No. All incoming ports are closed by default.

Connection from within

The connection is always established from within via the secure TIBA Secure VPN. Therefore, there is no ‘open door’ that can be scanned or attacked from the outside.

Why this is important

Open ports are the first thing attackers look for. By keeping all incoming ports closed, the installation remains invisible from the outside and inaccessible to anyone who does not belong to the secure network.

Can an older Fixsus installation also be secured according to these principles?

The full TIBA Secure functionality, including automatic and NIS2 updates, applies to TIBA3 installations from January 1, 2025.

Assessed on a case-by-case basis

For older installations, Fixsus evaluates which security measures and upgrades are possible on a case-by-case basis.

Often a catalyst for retrofitting

In practice, stricter security requirements often provide a good reason for a retrofit—phased if desired—to the current platform, making the full security layer available.

Can Fixsus provide support for cybersecurity and compliance questions?

Yes. Fixsus can provide information regarding the security measures within TIBA3 and offer support for technical cybersecurity and compliance questions.

Technical documentation

Fixsus can document which security measures are present within its scope of application, such as access management, encrypted communication, backups, user rights, and secure remote access.

Support for assessments

Fixsus can participate in:

• technical questionnaires;
• risk analyses;
• audits;
• tender documents;
• project-related compliance assessments;
• coordination with IT and security teams.

Definition of responsibility

A full legal or organizational compliance assessment does not fall exclusively under the technical scope of Fixsus.

For a complete assessment, the client’s IT department, security specialists, auditors, engineering firm, or legal advisors may also be involved.

Collaboration between parties

Fixsus provides the technical information regarding TIBA3 and collaborates with other involved parties to clearly map out responsibilities, risks, and required measures.

Can Fixsus simply access my installation?

No. Remote access is provided via the same secure channel with certificates and two-factor authentication, and every intervention is logged.

Every intervention logged

Every intervention is recorded in the intervention logbook. This allows you to check at any time who did what to the installation and when.

You determine the rights

Furthermore, via user management you determine who has which rights — including for Fixsus’s own access. Control over your installation lies with you.

Can I monitor and control my building remotely?

Web-based access

The visualization is built in HTML5. As a result, no separate software or mobile app is required, and the same interface works across various devices.

Secure connection

Remote access is provided via TIBA Secure. This utilizes a secure VPN connection, encryption, certificate verification, and multi-factor authentication, among other measures.

Dependent on user rights

Not every user is automatically granted the same capabilities. Roles and permissions determine who is only allowed to view data, who can operate systems, and who can modify settings.

Remote monitoring and intervention

Authorized technicians can also analyze the installation via the secure connection and, within the scope of established agreements, intervene remotely. This enables faster diagnosis and support without requiring an immediate site visit for every issue.

Internet connection required

Remote access requires a working internet or mobile connection. In the event of a connection failure, the building’s local control system will continue to function, but remote operation will be temporarily unavailable.

Can TIBA3 function locally without an internet connection?

Yes. The essential control and operation of the building systems continue to function locally if the internet connection is lost.

What continues to work locally

The central logic runs on the unit within the building itself. As a result, heating, cooling, ventilation, lighting, sun blinds, and other linked systems remain active.

Local visualization and operation also remain available within the building, as does local alarming.

What is temporarily unavailable

Functions that by definition require an external connection may be temporarily unavailable. This includes, among others:

• remote access and support;
• email and SMS notifications;
• weather forecast data;
• external reporting or integrations;
• certain server-dependent historical functions.

Autonomous building control

The basic control of the building is therefore not dependent on an external cloud connection. As soon as the connection is restored, the external services become available again.

Does the security also work via a 4G connection?

Yes. Whether the installation is connected via a landline or a 4G modem, the same security layer applies.

The same TIBA Secure layer

VPN, encryption, certificates, and two-factor authentication apply in full, regardless of the connection type.

Free choice of connection

The choice between a landline or 4G can therefore be made based on availability and cost, without compromising on security.

Does TIBA3 comply with NIS2?

TIBA3 includes various technical security measures that align with the principles of NIS2.

Technical security measures

These include, among others:

• access management;
• multi-factor authentication;
• encrypted communication;
• certificate verification;
• secure remote access;
• backups;
• controlled change management;
• security testing and periodic evaluations.

NIS2 goes beyond technology

Full NIS2 compliance does not only relate to a single software platform or security layer. The directive also sets requirements for the entire organization, including:

• risk management;
• incident response;
• business continuity;
• supplier and supply chain security;
• management responsibilities;
• training and awareness;
• documentation and evidence.

The role of Fixsus

Fixsus proactively invests in security and further aligns TIBA3 and its own operations with the principles and requirements of NIS2.

Project- and organization-specific assessment

Whether an organization or project fully complies with NIS2 must always be assessed based on the complete technical and organizational context.

TIBA3 can be an important technical component in this regard, but it does not in itself guarantee full NIS2 compliance for the client organization.

Does TIBA3 use multi-factor authentication?

Yes. Multi-factor authentication is used for access to TIBA3, ensuring that a password alone is not sufficient to gain entry.

Extra layer of security

In addition to the standard login, the user must verify themselves with a second factor. This ensures that access remains better protected if a password is intercepted or misused.

For individual user accounts

Multi-factor authentication is linked to personal user accounts. This allows access to be managed and revoked per user when responsibilities change.

Part of TIBA Secure

Multi-factor authentication is part of a broader security approach including:

• individual accounts;
• roles and permissions;
• certificate verification;
• encrypted communication;
• controlled remote access.

Dependent on the installation

For older installations or different access architectures, it must be verified which security options are available and whether an upgrade is required.

How are security updates and vulnerabilities managed?

Fixsus uses a controlled process to manage security updates, technical changes, and identified vulnerabilities.

Separated environments

Development, testing, and production environments are separated where applicable. Consequently, new functionality and security patches are verified before being applied to an operational installation.

Updates for TIBA3

For TIBA3 installations from January 1, 2025, automatic updates and security-focused updates are available within the Total Care+ service package.

Security testing

TIBA Secure is periodically subjected to penetration testing. During these tests, security specialists investigate whether vulnerabilities are present in the security layer and the associated infrastructure.

Follow-up on points for improvement

Identified points for improvement are assessed and, where necessary, incorporated into technical adjustments, updates, or additional security measures.

Aligned with business operations

The method and timing of updates are aligned with the criticality and availability requirements of the building. This prevents an update from affecting the operation of an active installation in an uncontrolled manner.

How are TIBA3 backups and recovery managed?

Backups of critical TIBA3 settings and configuration data are performed periodically, ensuring the installation can be quickly restored following a technical issue or hardware failure.

Monthly backup

Within Fixsus service plans, a monthly backup is made of the installation’s settings and autotuning data.

Recovery after a failure

When a central component or other hardware needs to be replaced, the available backup data can be used to restart the installation in the correct configuration.

Additional project data

In addition to settings and autotuning data, programming, visualization, schematics, and other technical project documentation are also managed. The specific components included in the automatic backup depend on the project architecture and the service agreements in place.

Tested recovery procedures

A backup is only valuable when the data can be effectively restored. Therefore, recovery procedures must be verified and, where necessary, tested.

Business continuity

For critical applications, the backup strategy can be supplemented with redundant infrastructure, a spare pool, and project-specific agreements regarding recovery times.

How do user rights work?

Each user has an individual account with a specific rights profile.

Rights tailored to every role

The profiles determine who is only permitted to view, who can operate the system, who may modify settings, and who has full administrative control. This ensures that everyone sees and can perform exactly what is appropriate for their role.

Every action is traceable

Because everyone works with an individual account, every action is traceable. This enhances both security and clarity within your organization.

How is access to TIBA3 secured?

Access to TIBA3 is restricted to authorized users and takes place via the secure TIBA Secure environment.

Individual user accounts

Each user works with a personal account. This allows access to be granted, modified, or revoked individually.

Roles and permissions

Users only receive access to the functions that match their role. For example, a receptionist can operate certain rooms, while a technical administrator can also modify settings and control parameters.

Two-factor authentication

In addition to a password, a second verification factor can be used. As a result, an intercepted or stolen password is not sufficient to gain access.

Certificate verification

Devices and connections are verified using digital certificates. Only trusted systems can connect to the secure environment.

Secure remote access

Access by Fixsus or another authorized technical party also takes place via the same controlled channel. Remote interventions can be recorded in the intervention log.

Traceability

Through individual accounts and permission profiles, it remains visible who has access and which actions are performed within the system.

How is TIBA3 secured?

TIBA3 is secured through a combination of technical and organizational measures.

Technical security

These include, among others, encrypted communication, access management, strong authentication, security updates, monitoring, and backups.

Organizational security

Controlled change management, risk management, training, and clear responsibilities are also part of a secure operation.

Project-specific approach

Security measures are tailored to the project’s architecture and the way users, administrators, and external parties access the system.

Is cybersecurity solely the responsibility of Fixsus?

No. Cybersecurity is a shared responsibility between Fixsus, the client, IT administrators, network partners, installers, and other involved service providers.

Responsibility of Fixsus

Fixsus secures the components for which it is responsible within the project. This includes, among other things, the TIBA3 environment, secure access, the configuration of user rights, and the agreed-upon update and service processes.

Responsibility of the client

The client remains responsible for, among other things:

• their own corporate and IT network;
• user management and internal access procedures;
• password policy;
• workstations and mobile devices;
• physical access to technical installations;
• internal incident reporting and security guidelines.

Responsibility of other parties

Installers, integrators, and external IT or network partners must also securely design, configure, and maintain their part of the installation.

Clear agreements

A secure installation therefore requires clear agreements regarding roles, access rights, maintenance, updates, monitoring, incident reporting, and management.

Is data encrypted in TIBA3?

Yes. TIBA3 uses encryption to protect data during communication and, where applicable, during storage.

Encrypted communication

Communication via TIBA Secure takes place over secure HTTPS and TLS connections. As a result, intercepted data is unreadable without the correct keys.

Secure remote access

Remote access to the installation also takes place via an encrypted VPN with certificate verification. This ensures that data is not sent unsecured over the internet.

Data storage and backups

Stored data, configurations, and backups are protected within the chosen infrastructure and service environment. The specific security depends on the technical architecture of the project and the location where the data is stored.

External links

For links via APIs or other communication protocols, the available and necessary security measures are assessed per interface. Not every external link automatically uses the same security method.

Is my data stored securely somewhere?

The data is compiled on the installation itself, and the settings and autotuning data are backed up on a monthly basis.

Backup included in every plan

The monthly backup is included in every service plan. In the event of a hardware problem, the installation can be restored quickly using this backup.

Secure access

Access to the data is provided via the secure TIBA Secure environment, utilizing encryption, certificates, and two-factor authentication.

Is TIBA3 continuously monitored for security incidents?

TIBA3 monitors the technical operation of the installation and records alarms, deviations, and interventions. The precise cybersecurity monitoring depends on the project architecture and the chosen service level.

Technical monitoring

The installation continuously monitors the status of connected technologies, components, and communication links. Deviations are displayed in the visualization and can be forwarded as alarms.

Incident registration

Notifications and interventions are recorded, allowing for retrospective analysis of what occurred, when the incident arose, and what action was taken.

Additional security checks

In addition to technical monitoring, vulnerability scans, security tests, and periodic penetration tests can be performed on the security layer and the associated infrastructure.

Depending on the service level

Not every installation is permanently monitored by an external security team or Security Operations Center. Additional cybersecurity monitoring is tailored to the risks of the project, the IT environment, and the chosen service formula.

Response to deviations

When a deviation or suspicious behavior is detected, Fixsus can investigate the situation, intervene remotely, or advise on additional measures.

Is TIBA3 updated automatically and how are updates managed?

TIBA3 can be maintained and updated throughout the entire lifespan of the installation. The method by which this occurs depends on the age of the installation and the chosen service package.

Updates without mandatory platform replacement

An update does not automatically mean that the entire installation, PLC, or visualization must be replaced. Fixsus can perform targeted updates on individual software components, security elements, or functions.

Available within Total Care

For TIBA3 installations delivered from January 1, 2025, automatic updates and updates within the framework of the NIS2 directive are available under the Total Care+ package.

Controlled execution

Updates are not simply applied to an operational building without control. Fixsus first assesses:

• the relevance to the installation;
• compatibility with existing programming;
• the potential impact on linked technologies;
• the appropriate time for execution;
• the necessity of a backup or restore point.

Security updates

Security updates may relate to remote access, operating software, certificates, user management, and other components of the technical infrastructure.

Continuity remains a priority

When performing updates, the operational reliability of the building is central. Where necessary, updates are scheduled outside of critical usage times, and operation is verified after execution.

No automatic functional changes

Control strategies or settings are not modified in terms of content without consultation. Functional optimizations only take place after analysis and coordination with the client.

What happens in the event of a cyber incident on my building’s corporate network?

The building management system runs separately from your office environment and continues to function autonomously.

Separated from your IT network

The BMS is not an extension of your IT network that fails along with it during an incident. Vital operations — logic, visuals, and alarms — run on the central unit itself.

The building continues to function

Even if your corporate network is down, the building remains regulated, operable, and monitored. The comfort and safety of the building do not depend on your office infrastructure.

What is certificate verification?

Every device in the mesh VPN network has a unique certificate that authorizes access.

No certificate, no access

A device without a valid certificate simply cannot enter the network — even if someone were to gain physical access to the network cable.

Part of TIBA Secure

Certificate verification is one of the layers of TIBA Secure, along with the mesh VPN, full encryption, and two-factor authentication. Only trusted, authenticated users and devices are granted access.

Who can do what in the system?

User management operates with individual accounts and permissions.

Permissions per role

For example, a receptionist may only operate the system, the technical department can modify settings, and user management remains reserved for the administrator.

Traceable and manageable

Because everyone works with their own account, every action is traceable. Permissions can be adjusted at any time when roles within your organization change.

Why is centralized architecture also more secure?

Because all intelligence is located in one place, only a single connection to the outside world is required — via a 4G modem or a landline.

One access point instead of dozens

One well-guarded access point is fundamentally easier to secure than dozens of scattered controllers, each connected to the network.

Smaller attack surface

Every controller connected to a network is a potential target. By centralizing the intelligence, the attack surface is drastically reduced, allowing the entire security focus to be concentrated on that single point.