In many facilities, building automation system credentials are tracked in spreadsheets, shared across teams or passed along informally when responsibilities shift — exposing organisations to unauthorised network access. As smart building systems increasingly connect HVAC, access control and lighting to corporate networks, poor credential hygiene has become a serious security vulnerability.