The Internet of Things takes information security into the physical world.  The barrier between physical and cybersecurity was created before we had all of our physical security and access systems using cyber technologies.  We must take a holistic approach to defending our businesses and individual privacy,  Hackers and cyber criminals do take a holistic approach and look for the weakest link... they do not make a distinction if your HVAC is being managed by the physical or cybersecurity team.