Smart Cities

Chapter 8
Smart Buildings and Construction Technology

Bachelors Program in Construction Technology
Smart Cities   •   Bachelor

Smart Buildings and Construction Technology

Introduction

Buildings are becoming active participants in urban systems. They consume energy, exchange information, support health and productivity, and increasingly interact with transport, electricity, water, emergency-response and communication networks. A smart building is not simply a building containing many digital devices. It is a built environment in which sensing, communication, analysis and control are deliberately integrated to improve performance for occupants, owners and society.

For construction professionals, this development changes both the product being delivered and the method of delivery. The project is no longer complete when the structure and finishes are handed over. It must also deliver reliable data, interoperable systems, maintainable equipment, secure networks and operational capability. Construction technology therefore includes not only materials, plant and methods, but also building information modelling (BIM), automation, robotics, reality capture, artificial intelligence (AI), prefabrication and digital commissioning.

This chapter examines these technologies critically. It emphasizes the relationship between technical capability and practical value: safety, productivity, energy performance, lifecycle cost, resilience and occupant well-being.

Learning objectives

By the end of this chapter, the reader should be able to:

  1. Explain the characteristics and architecture of an intelligent building.
  2. Describe how sensors, building automation and energy-management systems operate.
  3. Evaluate robotics, prefabrication, drones and reality capture in construction.
  4. Explain applications and limitations of AI-enabled construction.
  5. Assess technologies using safety, productivity, lifecycle, financial and human criteria.
  6. Identify cybersecurity, privacy, ethical, regulatory and organizational risks.
  7. Propose an implementation approach for a smart-building project.

1. From automated buildings to intelligent buildings

An automated building uses control systems to perform defined actions, such as switching lights or regulating air temperature. An intelligent building goes further: it collects data, interprets conditions, learns from operational patterns or user feedback, and coordinates several systems to achieve explicit objectives. Intelligence is therefore a system property, not a feature possessed by an isolated product.

A useful distinction is:

  • Connected building: devices can communicate and data can be accessed.
  • Automated building: programmed rules control equipment.
  • Intelligent building: data and models support adaptive, coordinated decisions.
  • Smart urban asset: the building exchanges information with wider city systems.

A building may be highly connected but poorly designed. For example, hundreds of sensors do not guarantee energy efficiency if they are badly positioned, uncalibrated or ignored by operators. Conversely, a modest system with reliable occupancy sensing, clear control logic and trained staff may produce substantial value.

1.1 The main system layers

Smart-building architecture is commonly understood through layers:

  1. Physical layer: structure, envelope, HVAC equipment, lighting, lifts, pumps, fire systems and renewable-energy equipment.
  2. Sensing and actuation layer: temperature, humidity, carbon-dioxide, occupancy, power, flow, pressure and air-quality sensors, together with valves, dampers, switches and variable-speed drives.
  3. Control layer: local controllers, programmable logic controllers and room or equipment controllers.
  4. Supervisory layer: the building management system (BMS), energy-management system (EMS), dashboards, alarms and schedules.
  5. Data and analytics layer: databases, digital twins, predictive models and AI tools.
  6. Enterprise and urban layer: maintenance systems, financial systems, utility platforms, mobility systems and emergency management.

Interfaces between layers are crucial. Open and documented protocols can reduce dependence on one supplier, but interoperability is not automatic. Equipment may use different data models, units, naming conventions, update rates and cybersecurity practices.

2. Building automation and energy management

2.1 The control loop

A basic control loop consists of a measured variable, a desired setpoint, a controller and an actuator. A room-temperature sensor measures actual temperature; the controller compares it with the setpoint; and a valve or compressor changes heating or cooling output.

The error is commonly represented as:

e(t) = r(t) − y(t)

where e(t) is the control error at time t, r(t) is the desired setpoint and y(t) is the measured output. The equation is applicable when both variables use the same units, such as degrees Celsius. It does not by itself define the controller response.

A proportional controller may be expressed as:

u(t) = Kp e(t)

where u(t) is the control signal and Kp is the proportional gain. A proportional-integral-derivative (PID) controller is more general:

u(t) = Kp e(t) + Ki ∫ e(t) dt + Kd de(t)/dt

Here Ki and Kd are integral and derivative gains. In practical building systems, derivative action can amplify measurement noise, and integral action can cause wind-up if actuators saturate. Controller tuning must therefore reflect equipment response, sensor quality, delays and safety limits. These equations describe control logic; they do not replace commissioning and field verification.

2.2 HVAC and indoor environmental quality

Heating, ventilation and air-conditioning often represent a major share of building energy use. Smart control can adjust operation according to occupancy, weather, indoor air quality, thermal loads and electricity prices. However, energy reduction must not compromise ventilation, thermal comfort, acoustics or infection-control requirements.

Carbon-dioxide concentration is often used as an indicator of occupancy-related ventilation demand, but it is not a complete measure of indoor air quality. It does not directly detect all pollutants, pathogens, volatile organic compounds or particulate matter. Sensors must be selected for the intended decision and calibrated against appropriate references.

Useful control strategies include:

  • time scheduling based on actual use rather than assumed occupancy;
  • demand-controlled ventilation, subject to applicable health requirements;
  • optimal start and stop of HVAC equipment;
  • supply-air-temperature reset;
  • chilled-water and hot-water temperature reset;
  • daylight-responsive lighting;
  • fault detection and diagnostics;
  • thermal-energy storage and demand response.

2.3 Energy performance metrics

A simple energy-use intensity (EUI) is:

EUI = E / A

where E is annual energy consumption, normally in kWh/year, and A is conditioned or gross floor area, normally in m². EUI is expressed in kWh/m²·year. Comparisons are meaningful only when boundaries, climate, occupancy, operating hours and energy sources are comparable.

For a project decision, lifecycle cost is more informative than initial price alone. A simplified present-value model is:

LCC = C0 + ∑(Ct + Rt)/(1 + i)t − Sn/(1 + i)n

where C0 is initial cost, Ct is operating cost in year t, Rt is replacement or major-maintenance cost in year t, i is the discount rate, Sn is residual or salvage value at year n, and n is the analysis period. All monetary values must use the same price basis. This simplified equation assumes annual cash flows and a constant discount rate; taxes, inflation, degradation and uncertainty may require more detailed analysis.

Worked example: simple energy payback

An occupancy-based lighting retrofit costs $48,000 and is expected to save 32,000 kWh per year. At an electricity price of $0.18/kWh, annual energy savings are:

32,000 × 0.18 = $5,760

Ignoring maintenance savings, degradation, financing and discounting, the simple payback period is:

48,000 ÷ 5,760 ≈ 8.3 years.

This is not a complete investment appraisal. It excludes installation disruption, lamp replacement, controls maintenance, demand charges, comfort effects and the time value of money. It illustrates why a reported payback should always state its assumptions.

3. Sensors, data and digital twins

Sensors convert physical conditions into data. Common building sensors measure temperature, relative humidity, illuminance, occupancy, vibration, pressure, flow, electrical demand, particulate matter and carbon dioxide. Selection should consider accuracy, range, response time, drift, installation environment, calibration, communication method, power supply and maintenance access.

Sensor errors have operational consequences. A false occupancy signal may ventilate an empty floor, wasting energy; a missed signal may create discomfort or unsafe conditions. Sensor placement is therefore a design and commissioning issue. A temperature sensor exposed to sunlight or mounted near a supply-air outlet may provide a technically valid signal that is operationally misleading.

Data quality has several dimensions:

  • Validity: does the value fall within a physically plausible range?
  • Completeness: are readings missing?
  • Consistency: do related measurements agree?
  • Timeliness: are data available when decisions are required?
  • Accuracy: how close is the reading to the true value?
  • Traceability: can the origin, calibration and transformation of data be established?

A digital twin is a continuously updated digital representation of a physical asset, its systems, state and relationships. A static BIM model is not automatically a digital twin. A useful twin requires identified assets, reliable data flows, defined update frequencies, operational purposes and governance. Examples include predicting equipment failure, simulating energy strategies, checking space utilization and coordinating maintenance.

4. Robotics and automation in construction

Construction robotics ranges from automated layout tools and robotic total stations to autonomous mobile platforms, bricklaying systems, rebar-processing machines, robotic welding, demolition robots and exoskeletons. The strongest applications generally have repetitive tasks, controlled conditions, measurable outputs and significant exposure to hazards or ergonomic strain.

Robotics can improve:

  • dimensional consistency;
  • productivity in repetitive work;
  • worker protection from height, dust, vibration or confined-space hazards;
  • data collection and progress monitoring;
  • operation in hazardous or inaccessible areas.

The limitations are equally important. Construction sites change daily, contain incomplete information and require judgment around irregular materials and interfaces. A robot designed for a factory may perform poorly on a cluttered site. Automation can also transfer risk: workers may be exposed to unexpected machine motion, software faults or complex maintenance tasks.

Safe deployment requires physical separation or controlled collaboration, risk assessment, guarding, emergency stops, competence training, inspection and clear allocation of responsibility. Exoskeletons, for example, may reduce some loads but can introduce altered movement, balance problems or localized strain. They should supplement, not replace, elimination of hazardous manual handling and good work design.

5. Prefabrication, modular construction and DfMA

Design for Manufacture and Assembly (DfMA) considers how components can be fabricated, transported and assembled efficiently. Prefabrication may include bathroom pods, mechanical-electrical-plumbing racks, façade panels, reinforcement cages, volumetric modules and digitally fabricated components.

The principal value comes from transferring suitable work from an unpredictable site to a controlled production environment. Benefits may include improved quality, reduced waste, shorter site duration, safer working conditions and more reliable cost planning. Factory production also supports inspection, repeatability and automation.

The approach creates new requirements:

  • early design freeze and coordination;
  • transport and lifting studies;
  • tolerance management;
  • standardized interfaces and connection details;
  • fire, acoustic and moisture performance verification;
  • logistics planning and temporary storage;
  • contractual clarity about design responsibility;
  • inspection of factory and site work.

A modular unit that cannot pass under a bridge, fit a crane radius or connect to an adjacent tolerance is not a successful prefabricated product. Constructability must be evaluated across the entire supply chain, not only at the factory.

BIM supports DfMA by representing geometry, interfaces, quantities and sequencing. Model coordination can identify clashes, but clash-free geometry does not guarantee buildability. Access for tools, temporary works, lifting points, inspection and maintenance must also be considered.

6. Drones and reality capture

Unmanned aerial systems can collect images, video, thermal data, multispectral data and, through photogrammetry, three-dimensional point clouds. Terrestrial laser scanning, mobile mapping, 360-degree cameras and handheld scanners provide complementary forms of reality capture.

Typical uses include:

  • topographic surveys and stockpile measurement;
  • roof and façade inspection;
  • progress documentation;
  • comparison of as-built conditions with BIM;
  • quantity verification;
  • safety observation in difficult areas;
  • post-event damage assessment.

Photogrammetric reconstruction depends on adequate image overlap, stable geometry, suitable lighting, ground-control or positioning information and appropriate processing. A visually attractive model may still contain scale, occlusion or alignment errors. Survey control and independent checks are essential when data support payment, structural decisions or legal claims.

Drone operations must comply with aviation law, privacy requirements, site rules and risk controls. Operators should consider people, property, weather, electromagnetic interference, battery condition and emergency landing. Capturing a worker’s face or neighboring property may create privacy obligations even when the flight is technically lawful.

7. AI-enabled construction

AI refers to computational methods that perform tasks associated with perception, prediction, classification, optimization or language-based assistance. In construction, machine learning may identify safety hazards from images, estimate project duration, predict equipment failure, classify defects, optimize logistics or analyze documents.

A supervised learning model is trained using examples with known outcomes. Its generalization quality depends on representative data, correct labels, appropriate features and an evaluation procedure that separates training from testing. A model that performs well on historical data may fail when project type, weather, workforce, equipment or reporting practice changes.

Important applications include:

  • Predictive maintenance: estimating the probability of equipment failure from vibration, temperature, runtime and fault history.
  • Computer vision: detecting missing edge protection, unsafe access, PPE nonconformance or defects.
  • Schedule analytics: identifying activities likely to delay completion.
  • Generative design: exploring arrangements subject to spatial, structural, energy and regulatory constraints.
  • Document intelligence: extracting obligations, dates and risk allocations from contracts and specifications.
  • Conversational assistance: helping users locate information in controlled project records.

AI should support professional judgment rather than obscure it. Outputs require confidence information, validation, human review and a process for correcting errors. A safety model trained mainly on well-lit images of one workforce may systematically misclassify other workers, clothing, weather or site conditions. Automation bias can cause people to accept an incorrect recommendation because it appears objective.

AI governance should address data ownership, consent, cybersecurity, model versioning, audit logs, explainability, liability, intellectual property and retention. Generative AI is particularly risky when it invents sources, dimensions, requirements or compliance claims. It should be constrained to approved information and checked by competent professionals.

8. Evaluating smart construction technology

Technology selection should begin with a problem, not a fashionable device. A practical evaluation framework considers six dimensions:

DimensionEvaluation question
SafetyDoes the technology remove, isolate or merely relocate risk?
ProductivityDoes it reduce time, rework, waiting or manual effort?
QualityDoes it improve conformance and verification?
Lifecycle performanceCan it reduce energy, maintenance and replacement impacts?
PeopleDoes it support comfort, accessibility, dignity and useful work?
GovernanceCan it be secured, maintained, audited and legally operated?

A balanced assessment combines quantitative and qualitative evidence. Useful indicators include recordable incidents, near misses, productivity per labor-hour, rework percentage, schedule variance, energy-use intensity, equipment availability, fault-resolution time, occupant satisfaction and indoor-air-quality compliance.

Metrics require definitions. For example, labor productivity may be measured as:

P = Q / H

where P is productivity, Q is accepted quantity of work and H is labor-hours. The result might be m² per labor-hour or units per labor-hour. Quantity must be measured consistently, and the metric should not encourage unsafe speed or reduced quality.

A technology business case should include capital expenditure, integration, training, data management, cybersecurity, maintenance, replacement and decommissioning. It should also account for benefits that are difficult to monetize, such as reduced injury exposure, resilience or improved occupant health.

9. Applied case: illustrative smart retrofit of a university building

Background

A four-storey university teaching building has aging air-handling units, fixed lighting schedules and limited information about occupancy. Complaints include overheated classrooms, poor air freshness and glare. Energy bills are rising, while maintenance staff rely on manual inspections.

Problem analysis

A preliminary survey finds that some temperature sensors are poorly located, several dampers do not respond correctly, and the BMS contains inconsistent equipment names. The building is not ready for advanced AI because its foundational data and controls are unreliable. Occupancy also varies substantially between semesters and examination periods.

Approach

The project team adopts a staged approach:

  1. Define requirements: maintain required ventilation and acceptable thermal conditions while reducing avoidable energy use.
  2. Repair fundamentals: recommission dampers, valves and sensors; standardize naming; document equipment.
  3. Improve measurement: install calibrated occupancy, temperature, humidity, carbon-dioxide and electrical submeters in representative zones.
  4. Implement controls: use schedules, occupancy-based adjustments and supply-air reset within approved limits.
  5. Add analytics: introduce fault detection for simultaneous heating and cooling, abnormal runtime and sensor disagreement.
  6. Engage occupants: provide transparent information and a reporting channel for comfort problems.
  7. Verify performance: compare energy and comfort against a weather- and occupancy-adjusted baseline.

Outcome

The illustrative project achieves lower after-hours operation, faster identification of faulty dampers and improved complaint resolution. Energy savings are lower than an early vendor estimate because ventilation requirements limit aggressive reduction. However, the project produces a more reliable BMS, better maintenance records and improved classroom conditions. The principal lesson is that commissioning and governance create the foundation for analytics; adding AI before correcting basic faults would have increased complexity without solving the underlying problem.

10. Implementation, procurement and lifecycle management

A successful smart-building project begins with an operational concept. The owner should identify desired outcomes, responsible users, acceptable performance ranges, data needs and handover requirements. Employer’s information requirements should define model content, asset identifiers, data formats, security expectations, testing and training.

Procurement should avoid describing a solution only by brand or device count. Performance-based requirements are generally stronger: the system must provide specified measurement quality, response, interoperability, cybersecurity and maintainability. Contracts should allocate responsibility for interfaces among architects, engineers, controls contractors, manufacturers, IT teams and facilities managers.

Commissioning should proceed from component tests to functional performance tests. Examples include verifying sensor calibration, valve stroke, alarm generation, fail-safe behavior, network loss response, schedules, sequences of operation and trend data. Seasonal testing may be necessary because heating and cooling behavior cannot always be assessed at the same time.

Handover must include more than a model file. It should provide verified asset registers, equipment manuals, control sequences, network diagrams, warranties, calibration records, cybersecurity credentials managed securely, training and a process for future updates. The digital asset must remain aligned with physical changes.

11. Risks, ethics and regulation

Smart buildings process data about spaces and sometimes individuals. Occupancy analytics can reveal work patterns, health-related information or participation in activities. Data minimization, purpose limitation, access control, retention limits and clear notices are essential. Where individual identification is unnecessary, systems should use aggregated or anonymized data.

Cybersecurity risks include weak passwords, unpatched controllers, exposed remote access, insecure wireless devices, supplier compromise and lateral movement from building networks into organizational systems. Good practice includes network segmentation, least-privilege access, secure configuration, vulnerability management, backups, incident response and supplier security requirements.

Other concerns include:

  • unequal access to comfortable or healthy spaces;
  • surveillance and inappropriate worker monitoring;
  • exclusion of occupants with disabilities when interfaces are poorly designed;
  • electronic waste and embodied impacts of frequent replacement;
  • algorithmic discrimination;
  • unclear liability when automated recommendations cause harm;
  • dependence on proprietary platforms and loss of long-term access to data.

Regulatory compliance remains human responsibility. Building codes, fire and life-safety requirements, electrical rules, accessibility obligations, occupational safety law, aviation rules and data-protection law continue to apply even when a system is automated. Smart technology cannot justify bypassing professional approvals or established safety processes.

12. Contemporary directions and professional capability

Current development is moving toward integrated energy flexibility, grid-interactive efficient buildings, low-carbon materials, autonomous inspection, robotic fabrication, open digital twins and more capable AI assistants. The most valuable direction is not maximum automation but coordinated, verifiable performance.

Construction professionals therefore need hybrid competence. They must understand construction methods and sequencing, but also data structures, sensor limitations, cybersecurity, systems integration, commissioning and human factors. A site manager need not become a software engineer, but should be able to question data quality, interpret a dashboard, identify unsafe automation and require evidence before accepting a digital claim.

The future role of the construction technologist is partly that of systems integrator. This includes translating operational needs into technical requirements, coordinating disciplines, managing interfaces, validating performance and ensuring that technology remains useful after project completion.

Chapter Summary

Smart buildings integrate physical systems, sensors, controls, data and human decision-making to improve safety, productivity, energy performance, lifecycle value and occupant well-being. Building automation depends on reliable control loops, well-positioned sensors, commissioning and appropriate sequences of operation. Energy metrics such as energy-use intensity and lifecycle-cost analysis support comparison, but their assumptions must be stated.

Robotics are most effective where tasks are repetitive, hazardous or highly controllable. Prefabrication and DfMA can improve quality and productivity, but require early coordination, tolerance management and logistics planning. Drones and reality capture support surveying, inspection and progress verification when data quality and legal controls are addressed. AI can assist prediction, vision, scheduling and document analysis, but requires representative data, human oversight, cybersecurity and clear accountability.

Implementation should be staged: define outcomes, repair basic systems, establish data governance, integrate technology, commission performance and maintain the digital asset. Privacy, accessibility, cybersecurity, environmental impact and regulatory compliance are central design concerns rather than afterthoughts.

Key Terms

Smart building: A building that integrates sensing, communication, analysis and control to improve defined outcomes.

Building management system (BMS): A supervisory system for monitoring and controlling building services.

Energy-management system (EMS): A system focused on measuring, analyzing and optimizing energy use.

Sensor: A device that measures a physical or environmental condition.

Actuator: A device that changes a physical system in response to a control signal.

Setpoint: The desired value of a controlled variable.

PID controller: A controller using proportional, integral and derivative actions.

Energy-use intensity (EUI): Energy consumption per unit of floor area over a stated period.

Lifecycle cost (LCC): The present value of initial, operating, maintenance, replacement and residual costs.

Digital twin: A data-connected digital representation of a physical asset or system.

Interoperability: The ability of different systems to exchange and use information effectively.

Robotics: The use of programmable machines to perform physical or information-based tasks.

DfMA: Design for Manufacture and Assembly, integrating production and installation considerations into design.

Prefabrication: Manufacture of components away from their final installation location.

Reality capture: Collection of digital representations of existing physical conditions.

Photogrammetry: Creation of measurements or three-dimensional models from overlapping images.

Artificial intelligence (AI): Computational methods that perform tasks involving prediction, classification, perception or decision support.

Commissioning: A systematic process of verifying that systems meet design and operational requirements.

Occupant well-being: The effects of building conditions on comfort, health, safety, productivity and inclusion.

Cybersecurity: Protection of digital systems, data and networks from unauthorized access, disruption or manipulation.

Review Questions

Short Answer Questions

  1. Distinguish a connected building, an automated building and an intelligent building.
  2. What roles do sensors and actuators play in a control loop?
  3. Define energy-use intensity and identify two conditions needed for valid comparison.
  4. State two benefits and two limitations of prefabrication.
  5. Why is commissioning important before applying advanced building analytics?

Long Answer Questions

  1. Explain the layered architecture of a smart building and discuss the importance of interoperability.
  2. Describe how building automation can reduce energy use without compromising indoor environmental quality.
  3. Evaluate the potential of robotics, drones and reality capture for construction safety and productivity.
  4. Discuss the opportunities and risks of AI-enabled construction, including data quality and accountability.
  5. Develop a lifecycle-oriented implementation strategy for a smart-building project.

Analytical / Application Questions

  1. A proposed lighting retrofit costs $60,000 and saves 40,000 kWh annually at $0.15/kWh. Calculate its simple energy payback and explain why the result is not a complete investment decision.
  2. A building has extensive occupancy sensors, but its energy use remains high and occupants report discomfort. Diagnose at least five possible technical or organizational causes and propose a sequence of corrective actions.
  3. As project manager, compare site-built and prefabricated mechanical-service installation for a constrained urban project. Recommend one approach using safety, logistics, quality, schedule, lifecycle and governance criteria.

Multiple Choice Questions with Answers

Question 1

Which feature most clearly distinguishes an intelligent building from a merely automated building?

A. It contains electrical equipment.

B. It uses adaptive analysis and coordinated decisions based on data.

C. It has a fixed operating schedule.

D. It uses manual maintenance records.

Correct Answer: B. It uses adaptive analysis and coordinated decisions based on data.

Question 2

In the control equation e(t) = r(t) − y(t), what does e(t) represent?

A. The actuator capacity

B. The measured output

C. The control error

D. The discount rate

Correct Answer: C. The control error

Question 3

A building consumes 500,000 kWh/year and has an area of 10,000 m². What is its EUI?

A. 5 kWh/m²·year

B. 50 kWh/m²·year

C. 500 kWh/m²·year

D. 5,000 kWh/m²·year

Correct Answer: B. 50 kWh/m²·year

Question 4

Which condition most strongly supports successful construction robotics?

A. Highly repetitive work in a controlled environment

B. Constantly changing tasks with no defined outputs

C. Unplanned work without safety controls

D. Tasks requiring no measurement or supervision

Correct Answer: A. Highly repetitive work in a controlled environment

Question 5

What is a principal requirement for reliable reality-capture data used in payment verification?

A. Decorative rendering

B. Independent survey checks and appropriate control

C. Maximum image color saturation

D. Avoidance of all site measurements

Correct Answer: B. Independent survey checks and appropriate control

Question 6

Which statement about a digital twin is correct?

A. Any static BIM model is automatically a digital twin.

B. A digital twin requires a data connection and defined operational purpose.

C. A digital twin contains no physical asset information.

D. A digital twin eliminates the need for commissioning.

Correct Answer: B. A digital twin requires a data connection and defined operational purpose.

Question 7

A retrofit costs $48,000 and saves $5,760 per year. What is its simple payback period?

A. 0.83 years

B. 4.8 years

C. 8.3 years

D. 83 years

Correct Answer: C. 8.3 years

Question 8

Which is an important risk of applying AI to construction safety images?

A. The model may fail when conditions differ from its training data.

B. AI always removes the need for safety professionals.

C. AI cannot process any visual information.

D. AI automatically guarantees legal compliance.

Correct Answer: A. The model may fail when conditions differ from its training data.

Question 9

What is a central benefit of DfMA?

A. It postpones all coordination until installation.

B. It transfers suitable work to controlled manufacturing conditions.

C. It removes the need for transport planning.

D. It guarantees that all modules fit without tolerance analysis.

Correct Answer: B. It transfers suitable work to controlled manufacturing conditions.

Question 10

Which practice best protects smart-building cybersecurity?

A. Using shared administrator passwords

B. Leaving remote access permanently open

C. Network segmentation and least-privilege access

D. Ignoring software updates to preserve convenience

Correct Answer: C. Network segmentation and least-privilege access

Smart Cities
Chapter 8 of 15