Commercial real estate companies are not typically on the forefront of using technology. Last year, it was clear they weren't leaders in cybersecurity either. Attackers had already been targeting real estate companies for at least a few years and many continue to be unprepared.

According to JLL's property management group, Red Bison Technology Group, and Aon, there are three areas where building owners frequently have misperceptions. "[T]hey must fully understand the risk of Information Technology and Operational Technology (IT/OT) threats, why comprehensive cyber insurance is necessary to protect against catastrophic loss and how to meet minimum compliance and cyber insurance requirements," the companies said.

IT threats are found on computer systems and networks. Servers, desktops, storage, and the networks the connect them all are included. OT threats, however, are those that endanger the operational areas of a building: HVAC and other energy systems, lighting, controllers in all sorts of devices, and the building network—in other words, the building and its systems, including any smart building technology.