What are the technical risks of using this technology?

BACnet and Drupal as core technologies have proven themselves to be fundamentally sound. Impressive case studies of each technology can be found on the Internet.[i]^, [ii] Both have substantial backing from individual members and organizations all over the world.

BACnet International is an industry association that facilitates the successful use of the BACnet protocol in building automation and control systems through interoperability testing, educational programs and promotional activities. BACnet International oversees operation of the BACnet Testing Labs (BTL) and maintains a global listing[iii] of tested products.[iv] Additionally, BACnet Interest Groups (BIGs) have organized for AustralAsia, China, Europe, Finland, the Middle East, Poland, Russia and Sweden.[v]

The Drupal Association is an educational non-profit organization that tasks itself with fostering and supporting the Drupal software project, the community and its growth. Supported by both individual members and organizations, the Association uses its resources, network and funds to constantly engage in new projects and initiatives to help educate people about Drupal and support the growth of the Drupal project.[vi] Additional project specific support for developing BACnet-Drupal interactions is provided by the BACnet Group – Drupal.[vii] ^,[viii]

“Security concerns” are one of the most common issues cited by facility management personnel for not making BACnet systems more publically available.  NIST addressed this issue in 2002 with the seminal work by Penn State researchers entitled “Secure Integration of Building Networks into the Global Internet”.[ix]  ASHRAE SSPC-135 (aka “the BACnet Committee”) responded in 2006 with publication of Addendum g to the ANSI/ASHRAE Standard 135-2004.  This addendum updated the existing BACnet Network Security architecture defined in clause 24 of Standard 135-2004 to a cryptographic standard that would meet the needs of today's networks. [x]

Drupal can be deployed safely as a Digital Government Strategy[xi] and meet the requirements of The Federal Information Security Management Act of 2002 (FISMA).[xii] The act recognized the importance of information security to the economic and national security interests of the United States.  The OpenEnergy team includes a digital business company (Acquia[xiii]) that provides a unified Drupal platform for content, community and commerce and is the first provider to offer enterprise-class Drupal cloud services with a FISMA moderate Authorization to Operate (ATO).[xiv]