Preventing hackers from attacking building automation systems means that engineers need to understand the interrelationships between IT and building automation and recognize the threat of hackers whose intent, at best, is to access a system and, at worst, is to cause catastrophic system failures. How can the specifying engineer keep up? This article discusses how to design an effective, secure, and scalable specification for clients.