On the Thursday of CEDIA 2025, I stepped away from the very busy SpecOp Secure booth for a few minutes to sit in on the Smart Stage cybersecurity session. The seats were mostly full, but I was surprised there weren’t more integrators there. It was more surprising because I had spent the previous two days talking with integrators who work in the homes of CEOs, traders, and other high-powered executives. These clients are used to enterprise-grade protection at the office, yet many go home — or work primarily from home — with none of the same safeguards.
Built-in tools like Microsoft Defender or McAfee aren’t enough to protect those residential environments. When integrators install or maintain the network, they inherit the risk if something goes wrong. A breach that begins in a home they designed can lead to calls from the client’s IT team, their bank, or even investigators.
At the same time, not offering cybersecurity is a missed business opportunity. Integrators can turn the need for stronger protection into dependable recurring revenue by offering managed cybersecurity services. The budgeting conversation has become easier as well because IRS Section 132 now allows employers to treat certain executive cybersecurity measures as a business expense.
So it was no surprise to me when CE Pro’s September 29 write-up on the session highlighted the same message: “CEDIA Expo 2025 Smart Stage Panel Stresses Cybersecurity Urgency for Integrators.”
High-value residential networks are no longer off the radar for attackers. When executives work from home, they bring enterprise-level exposure into spaces that often lack enterprise-grade protection. Farr Shepherd, president of SpecOp Secure, told the Smart Stage audience, “If you’re installing the network, you have liability.” That message resonated throughout the session: integrators who deliver connected systems without security controls are already part of the risk picture.
After Shepherd’s point about liability, the room kept coming back to the same takeaway: specify cybersecurity on every project by default. Make protection part of the scope, price it in, and use an opt-out only if a client declines. That keeps expectations clear, raises the baseline, and reduces liability. If someone does opt out, record the decision with a signed waiver. You can adapt our Liability Waiver Cheat Sheet with your attorney.
A breach that begins on a system you built does not stay contained. Farr dissected a case where a neighborhood war-driving attack reached the FBI and the client’s bank. Once investigators get involved, the integrator who installed or maintained the network is suddenly part of the incident response.
To help you protect your business, SpecOp Secure created a Liability Waiver Cheat Sheet. It explains how to quote cybersecurity protection as a standard part of every proposal and require a signed opt-out if a client declines. Having that documentation shifts much of the liability off your plate and shows you addressed the risk.
Attackers do not stop at the router. IoT security gaps in everyday devices such as thermostats, locks, and cameras are often the entry point. Shepherd shared a striking example: hackers used a drone equipped with a Wi-Fi pineapple to compromise a luxury home’s network, shut down its cameras, and steal valuable art. It underscored the point that perimeter firewalls alone cannot keep clients safe
Pro Tip: NIST’s IoT guidance outlines how to evaluate device security and integrate it into overall risk management.
What it is: War driving is the practice of cruising through neighborhoods or business districts with a laptop or mobile device to locate and exploit unsecured or poorly protected Wi-Fi networks.
