Weekly Briefing

article sponsor image
Partner Content

The New Operating Model for Building Portfolios: Secure Visibility, Not Just More Data

March 5, 2026 |
4 min read
listen to article Listen to this article

Commercial buildings are becoming software-defined assets. Systems that were once isolated – HVAC, lighting, metering, indoor air quality, and specialty plant – now generate continuous streams of operational data and can be accessed remotely in seconds. That shift has unlocked enormous value: faster troubleshooting, better energy performance, improved tenant experience, and portfolio-wide benchmarking and optimisation.

This shift has also created a new kind of exposure. The moment we connect operational technology (OT) to modern tools, we inherit a responsibility that used to sit mostly in the IT world: cyber security as a day-to-day operational requirement.


For portfolio owners and facilities teams, this isn’t an abstract risk conversation. It’s a practical one. The question isn’t “Should we connect buildings?”—that decision has largely been made by commercial reality. The real question is: How do we achieve portfolio visibility without opening doors we can’t close?


Why “cyber-secure portfolio visibility” is now table stakes

Most portfolios didn’t grow up with a single blueprint. They are accumulations of acquisitions, refurbishments, vendor transitions, and regional differences. That complexity creates three pressures:

  1. More stakeholders need access. Facilities teams, service partners, commissioning agents, energy consultants, and security contractors all touch parts of the building lifecycle. If access is informal, shared credentials, ad-hoc VPNs, or one-off remote methods, risk compounds.
  2. Visibility needs to be global and immediate. When something fails (comfort complaints, plant alarms, abnormal energy spikes), waiting for someone to be onsite is expensive and often unnecessary. Portfolio operations now expect remote insight and action. NovaQ frames this directly: “Rapid, secure portfolio-wide remote access isn’t a luxury, it’s a necessity.”
  3. The building edge is not a controlled enterprise environment. OT networks contain long-lived devices, varied configurations, and vendor-specific interfaces. Security can’t rely on assumptions like “the network is trusted.” It must be designed for constant change.

A cyber-secure portfolio solution, then, is not just a dashboard. It’s the operating layer that governs who can see what, who can do what, and how data moves, without compromising the internal networks that keep buildings running.


Security for portfolios starts with a different philosophy: zero trust

In many legacy approaches, security is built around a perimeter: keep the bad actors out and assume what’s inside is safe. That model breaks down in modern portfolios where users, vendors, and systems are distributed—and where the perimeter changes building to building.


NovaQ is designed around zero trust principles, with enterprise-grade encryption and multi-factor authentication built into its security posture. In plain terms, zero trust is a mindset shift:

  • Don’t trust because something is “inside.”
  • Verify identity, enforce least privilege, and contain access to only what’s required.

This is especially important in buildings because access needs are often granular. A security contractor shouldn’t have broad visibility into mechanical systems; an HVAC specialist may not need access to access-control networks. NovaQ’s manages this with the ability to structure permissions so a contractor can only access the buildings they’re contracted to, the relevant networks, and only the ports required. This is how you prevent the most common access failure modes: over-privileged accounts, persistent third-party access, and visibility that grows beyond its original intent.


Remote access should reduce exposure, not expand it

Not all remote connectivity is equal. At a portfolio scale, connectivity strategy becomes security strategy. If access requires complex firewall changes or inbound exposure, you are increasing operational burden and the attack surface at the same time.


Access needs to be predictable, auditable, and consistently governed across every site.


The edge is where portfolio reality meets portfolio security

Most portfolios aren’t trying to replace their on premise BMS/EMS. They’re trying to connect it – safely – and make the data useful.


A true multi-vendor and open system, working with BACnet-compliant BMS/EMS environments, supports sending data to secure, modern analytics platform via REST and MQTT. This is an important architectural stance: your portfolio data should not be trapped. Owners and FM teams should be able to use the tools that fit their operational maturity, today and tomorrow.


To make this work at scale, NovaQ uses gateways at the edge that are remotely configured, monitored and managed, that push data directly to the configured endpoints in the customer’s cloud platform. That separation – centralized configuration and updates, with secure data delivery to customer-selected destinations – helps portfolios standardize operations without forcing a single analytics worldview.


What portfolio owners and FM teams should expect from “modern secure visibility”

When cyber-secure portfolio solutions are done right, the payoff isn’t merely reduced risk. It’s operational excellence that is sustainable because it’s governable.


Look for outcomes like:

  • Faster incident response because you can securely connect to systems “in seconds.”
  • Portfolio-level monitoring – “stay informed… from anywhere in the world,” without creating inconsistent access patterns across sites.
  • Data mobility via modern interfaces (REST/MQTT), allowing owners to evolve their analytics stack without redoing connectivity.
  • Continuous security posture through “automated system and security updates” and centralized management.
  • Governance that matches reality: role-based access that can reflect the boundaries of contracts, responsibilities, and compliance needs.

And importantly, secure visibility should mature into secure intelligence.


The bottom line

A cyber-secure portfolio solution is now a foundational capability for modern commercial real estate operations. Not because cyber risk is fashionable – but because connected buildings are now integral to how portfolios deliver value.


The most resilient portfolios will be the ones that treat secure access and data governance as part of the operating model – built on zero trust, least privilege, and openness that doesn’t sacrifice control. NovaQ was designed with that premise: give owners and FM teams real-time visibility, true multi-vendor connectivity, and secure remote access – without compromising the integrity of the building networks they depend on.

This Week’s Sponsor

Optergy delivers leading energy and building management, and tenant billing solutions to smart buildings around the world. Our solutions simplify operations, enhance energy efficiency and help our customers achieve their sustainability