Security in the BIM world


Anthony Burd Head of Sector – Construction, and Kieran Parkinson, Market Development Manager for the Built Environment at BSI, outline best practice for managing security when utilising BIM

With the advent of BIM, an architecture, engineering and construction (AEC) industry that previously relied on CAD and marked-up drawings will have access to virtual 3D asset models embedded with all the relevant data. This has major uses for everyone involved from the planning, design, construction and facility management aspects of the build, where all elements can be integrated and viewed by the architects, engineers and constructors,

This greater access to project and asset information throughout the supply chain requires careful consideration of the security of that information. How should it be managed? What information can be shared? When should it be shared? Who should be able to access it?

To help answer these questions, BSI partnered with the Centre for the Protection of National Infrastructure (CPNI) on behalf of the Building Information Modelling (BIM) Task Group to develop best practice for managing security in a BIM world, and in May 2015 published PAS 1192-5:2015 Specification for security-minded building information management, digital built environments and smart asset management.

This PAS outlines a risk assessment process to determine the sensitivity of information already held or to be acquired during the course of a project, and identifies security considerations for BIM collaboration throughout all phases of the lifecycle of an asset i.e. concept, design, construction, operation and disposal. It specifies the steps required to create an appropriate security mindset and culture whilst enabling a business to unlock new and more efficient processes and collaborative ways of working.


The intended audience for the document is anyone and everyone throughout the AEC supply chain ie: organisations and individuals responsible for the procurement, design, construction, delivery, operation and maintenance of buildings and infrastructure assets. Although specific to the use of Level 2 BIM, the requirements will provide a foundation to support the evolution of future digital built environments and will contribute to smart asset management.

The core BIM Level 2 standards

BIM is effectively changing the face of construction and is recognised not just by industry but the government as a key tool. As older methods eventually become obsolete, the AEC industry will have to adapt. In anticipation of the importance of BIM, BSI has developed a full BIM suite of standards and standardisation tools to support the use of BIM.

In 2015, the government recognized the specific importance of PAS 1192-5 and the following five standards (BS 1192, PAS 1192-2, PAS 1192-3, BS 1192-4 and BS 8536-1), which together form the core BIM Level 2 standards suite. These standards are all available to be downloaded for free at–Construction/BIM-/.

BS 1192:2015 Collaborative production of architectural, engineering and construction information. Code of practice. The standard establishes the methodology for managing the production, distribution and quality of construction information, including that generated by CAD systems, using a disciplined process for collaboration and a specified naming policy.

PAS 1192-2:2013 Specification for information management for the capital/delivery phase of construction projects using building information modelling. The requirements within PAS 1192-2 build on the existing code of practice for the collaborative production of architectural, engineering and construction information, defined within BS 1192:2007.

It focuses specifically on project delivery, where the majority of graphical data, non-graphical data and documents, known collectively as the Project Information Model (PIM), are accumulated from design and construction activities.

PAS 1192-3:2014 Specification for information management for the operational phase of assets using building information modelling is a partner document to PAS 1192-2, and focuses on the operational phase of assets irrespective of whether these were commissioned through direct capital works, acquired through transfer of ownership or already existed in an asset portfolio. Like PAS 1192-2, PAS 1192-3 applies to both building and infrastructure assets.

BS 1192-4:2014 Collaborative production of information Part 4: Fulfilling employers information exchange requirements using COBie – Code of practice COBie (Construction Operations Building Information Exchange), is required on all government construction projects where information must flow into portfolio, asset planning and facility maintenance tools. BS 1192-4 provides users with recommendations on how to use COBie to structure information required for the operation of an asset or facility during the construction process, supporting the processes outlined in PAS 1192-2 and PAS 1192-3.

BS 8536-1:2015 Facility Management briefing is being revised as Facility Management briefing for design and construction – Code of practice, to take into account current industry best practices in briefing and the emergence of the soft landings process and BIM. The revised standard gives recommendations for design and construction to ensure that design takes account of the expected performance of the asset/facility in use over its planned operational life.

It introduces the integration of the principles of the soft landings process, combined with effective information management and the requirements for post-occupancy evaluation (POE) to strengthen the link between asset/facility owners, operators and their facility managers and the design and construction team to assure performance of the design and the operational asset/facility in all aspects.



Anthony Burd, Head of Sector – Construction

Kieran Parkinson, Market Development Manager


Tel: +44 (0)845 086 9001

Twitter: @BSI_press


Please enter your comment!
Please enter your name here