Cybersecurity in Construction
The practices and technology protecting a construction company's project data, from BIM models and financial systems to jobsite IoT devices and connected equipment, against unauthorized access, a growing concern as more of a project's information and physical systems become networked and internet-connected rather than kept on paper or standalone computers.
Why it matters
Construction companies increasingly handle sensitive data, project financials, building security system designs, client information, that makes them a real target, and the industry's historically lower cybersecurity maturity compared to other sectors makes it an attractive target precisely because it's often less defended.
On a real project
A general contractor requires two-factor authentication and restricted access permissions on its cloud-based project management software, treating project financial and design data with the same security discipline as any other sensitive corporate system.
Who this matters most to
A Construction Technology Manager or a dedicated IT role manages a construction company's cybersecurity practices across its office and jobsite systems.
Where this goes wrong
A subcontractor's project management account is compromised through a phishing email, giving an attacker access to project schedules and, through a connected system, the building's own security system design during construction. The breach isn't discovered until fraudulent payment requests referencing real project details start reaching the general contractor's accounting department, well after the initial compromise.