IoT and Smart Buildings: What FM Managers Need to Understand Before the Tech Arrives on Site

Maxcene Crowe
Apr 8
5 min read

Here is a hard truth most smart building vendors will not put in their sales pitch: the majority of smart building deployments underperform — not because the technology failed, but because Facilities Management was never involved in specifying it.

By the time the sensors are on the walls and the BMS dashboard is live, the FM team is inheriting a system built to someone else's priorities. The result? Data nobody asked for, integrations that do not talk to the CAFM, and contractual responsibility for assets nobody fully understands.

If you are managing a mobilisation, you have a window to get this right. Most FM managers do not use it.

What IoT Actually Means in an FM Context

IoT — the Internet of Things — is not a product. It is an architecture: physical sensors and devices that collect real-world data, connect over a network, and feed that data into a management platform where it can be acted upon.

In a building context, that means:

Sensors monitoring temperature, occupancy, air quality, vibration, water flow, access events
Connectivity — typically Wi-Fi, cellular, or proprietary protocols (ZigBee, LoRaWAN) — transmitting that data to a central system
BMS integration — connecting sensor data into the Building Management System so automated responses can be triggered (e.g., HVAC adjustment based on occupancy)
FM platform integration — feeding data into your CMMS or CAFM so maintenance workflows, asset records, and reporting are updated in real time

The distinction between a sensor network and a smart building is integration. Sensors that feed data into a siloed dashboard nobody checks are not smart — they are expensive noise. According to IFMA's analysis of AI in FM, organisations with siloed systems and disconnected data repositories are at a significant disadvantage compared to those operating from a unified data model.

The 5 FM Applications Where IoT Delivers Measurable Value

Not all IoT use cases are equal. These five have demonstrated ROI in FM contexts:

1. Predictive maintenance

Vibration sensors on HVAC motors, temperature sensors on electrical panels, and flow monitors on pipework detect anomalies before failure. Dexterra Group reports that approximately 35% of facility managers using IoT-driven predictive maintenance have reduced downtime by more than 20%.

2. Energy optimisation

Real-time occupancy data allows automated adjustment of HVAC and lighting — eliminating the energy waste of conditioning empty spaces. Buildings consume nearly 30% of global energy, and analytics-driven energy management systems are one of the most direct levers FM can pull on cost and sustainability.

3. Space utilisation

Desk sensors, room booking integration, and footfall data provide hard evidence of how space is actually used — versus how it is assumed to be used. In portfolio optimisation decisions, this data is invaluable.

4. Compliance and audit trails

Environmental sensors (temperature, humidity, air quality) continuously log data, providing automated compliance evidence — critical in healthcare, food service, and pharmaceutical environments where manual log books introduce human error risk.

5. Reactive maintenance acceleration

Asset-linked QR codes and IoT fault detection can auto-generate work orders the moment a threshold is breached, reducing the gap between fault occurrence and FM response. ServiceChannel's 2025 analysis confirms that connected sensors and IoT devices feeding continuous data into maintenance systems eliminate guesswork and reduce unplanned outages.

Data Ownership and Governance — Who Owns the Building Data?

This is the question FM managers consistently fail to ask before contract signature — and then spend years trying to resolve.

When IoT systems are installed by a client, a developer, or a specialist sub-contractor, the data they generate may sit on a third-party cloud platform. Your access may be contractually limited. If the contract ends, that data may walk out the door with the vendor.

Before any smart building system goes live on your watch, establish in writing:

Who owns the raw data generated by sensors
Who owns the processed analytics and reporting outputs
What data portability rights exist if the contract changes
How long data is retained and where it is stored
Whether the client, FM provider, or vendor is the data controller under UK GDPR

IFMA's guidance on AI and FM explicitly highlights that organisations must establish process committees for acceptable transparency levels and require assurances from solution providers on information governance. The same principle applies to IoT data from day one.

The Mobilisation Window — Why Now Is the Best Time to Specify Smart Building Requirements

Mobilisation is the only time in a contract lifecycle where FM has genuine leverage over how technology is specified, integrated, and governed.

After go-live, change is expensive. New integrations require capital approval. Data gaps are permanent — you cannot retrospectively collect sensor data you never captured.

During mobilisation, FM managers should:

Audit what smart systems already exist in the asset and what data they generate
Confirm whether existing BMS infrastructure can integrate with preferred CAFM/CMMS platforms
Define what IoT outputs are needed to meet SLA reporting requirements
Specify sensor placement and coverage in the Asset Register before contractors leave site
Establish data governance agreements before the first byte of sensor data is transmitted

The IWFM Market Outlook 2025 confirms that technology investment is increasing across the WFM sector — which means FM managers who enter mobilisation without a tech specification framework are absorbing other people's choices.

Cybersecurity and FM — What FMs Need to Ask Their IT Counterparts

IoT introduces network risk. Every connected sensor is a potential entry point. BMS platforms that are accessible via the internet — and most modern ones are — are a target.

FM managers are not expected to be cybersecurity experts. But they are responsible for the operational continuity of the assets they manage, and that now includes the digital attack surface.

Key questions to raise with your IT or client security team:

Is the BMS/IoT network segmented from the corporate IT network?
What is the patch and firmware update policy for connected devices?
Who has remote access to building systems, and is that access logged?
What is the incident response plan if a BMS is compromised?
Are IoT devices included in the organisation's cyber risk register?

Dexterra Group flags cybersecurity and data privacy risk as one of the primary challenges introduced by connected cloud platforms, IoT sensors, and smart building systems — a risk that sits squarely in the FM operational domain.

IoT Readiness Checklist — Save This

Before mobilisation:

Audit existing smart systems, sensors, and BMS infrastructure on site
Confirm CAFM/CMMS integration capability with building systems
Define IoT data outputs required for SLA and compliance reporting
Establish data ownership and governance in contract schedules
Agree sensor placement, naming conventions, and asset tagging standards

At go-live:

Confirm all sensor data is flowing into the correct platform
Test automated work order generation from fault thresholds
Validate energy monitoring baselines are set accurately
Confirm cybersecurity network segmentation is in place
Document remote access credentials and access log processes

Ongoing:

Schedule quarterly IoT data quality audits
Review sensor coverage as space use changes
Include BMS/IoT system updates in planned maintenance schedules
Benchmark energy and occupancy data against contract KPIs

Save this for your next mobilisation briefing.

Recommended Courses

If you are managing or preparing for a mobilisation where technology specification is on the agenda, these two courses will give you the frameworks to do it properly:

Pillar 1: Pre-Mobilisation — MCFM00107.1 | £295 The pre-mobilisation phase is where IoT and smart building requirements must be captured. This course covers the full pre-mobilisation framework, including technical due diligence, asset auditing, and specification development.

Mobilisation Mastery: From Chaos to Clarity | Free A structured introduction to mobilisation principles — ideal for FM managers who want to understand where smart building technology decisions sit within the wider mobilisation workflow before committing to a full programme.

Sources

IWFM Market Outlook Survey Report 2025 — https://www.iwfm.org.uk/resource/market-outlook-survey-report-2025.html
IFMA — AI in Facilities Management — https://blog.ifma.org/ai-in-facilities-management
ServiceChannel — Top FM Trends 2025 — https://servicechannel.com/blog/facility-management-trends/
Dexterra Group — Leveraging Technology in Facilities Management — https://dexterra.com/blog/leveraging-technology-in-facilities-management/
City FM — Facilities Management Technology Trends 2025 — https://www.cityfm.us/blog/facilities-management-technology/