Cybersecurity in the construction industry
According to a?recent report, the construction industry is now the third-highest sector impacted by data security incidents.
Unlike the government, financial, and healthcare sectors where financial rewards are more lucrative, the construction industry has been almost immune from cyber events in the past. This was due to the limited personal data it keeps and collects, as well as the limited regulations and guidance the sector receives.
However, over the past few years, our sector has started to come under attack as cybercriminals expand their scope.
So what can construction organisations do to increase their cybersecurity awareness and address this rise in cyber threats?
How do cyber attacks impact the construction sector?
Cybersecurity?is defined as a practice used by individuals and organisations to protect against unauthorised access to data centres and other computerised systems.
In recent years, there have been many high-profile cyber attacks in the construction industry, which have caused significant project delays and financial damage. The?rise of AI?and the extensive use of subcontractors and suppliers have heightened the exposure to cyber risks.?The digitisation of the construction industry?now means large amounts of highly sensitive and confidential data (including building models, documents, drawings, and personal data) are being processed, stored, and shared.?
This has amplified the need for the sector to implement a robust cyber risk strategy.
Top cyber risks to look out for?
Although construction projects are often associated with physical materials such as steel, cement, and concrete, they’re entirely reliant on internal data to function. The three key stages in the construction process (design, construction, and handover) involve extensive digital workflows. This presents?unique risks?to the construction sector due to the specific tools they use for managing data, delivering services, and systems control.
These include:?
The current top cyber threats in the industry include:
Ransomware:
A type of malicious software or malware, designed to deny access to computer systems or sensitive data until ransom is paid.
Payment interception:
This is where the client receives emails or phone calls claiming to be the builder, who then requests payments to be deposited into a different bank account.?
领英推荐
Phishing:
Malicious emails are designed to look genuine, which encourage users to click - infecting their computers in the process.?
Ways to mitigate cyber threats
While there are no guaranteed ways to prevent a cyber threat, here are some simple strategies businesses can implement to protect themselves:
Train your staff regularly:
It’s imperative to train your employees how to identify potential cyber threats. For example, ensure your staff recognises a suspicious email. Rather than passwords, encourage your employees to use passphrases.?
Verify payment requests:
If you’ve received a request to transfer a large sum of payment, or are advised of a changed bank account, it’s vital to ensure the request is legitimate. Contact the sender to confirm prior to transferring any payments.
Get cyber insurance:
You can limit the financial impact of a cyber attack by purchasing a cyber insurance policy. This will protect your digital assets and sensitive business data.
Backup your data:
Data backups allow you to restore systems promptly in the event of a ransomware attack. If your organisation manages the backup, ensure your plan incorporates?multiple software-based strategies and approaches. Alternatively, you can choose to use a third-party.
In summary?
As a result of the construction industry relying heavily on digital technology for its operational efficiencies, our sector is now becoming an attractive target for cyber attacks, threats, and exposures.?
This vulnerability has created a growing challenge for the construction sector, intensifying the need for businesses to implement a prevention plan against these risks.
Fortunately, with the right protocols, training, and processes, organisations can effectively mitigate any cyber threats, potentially saving them millions of dollars in the long run.
This article was also published on our CGC Recruitment Newsletter Blog.