As digital transformation takes the world by storm, conservative economic sectors such as public transportation, agriculture, and banking and finance have come to rely on technological advances. Despite that fast pace of adoption elsewhere especially around AI, construction stands as one industry where innovation offers tremendous, yet largely unexplored potential.
Technology adoption in this area has been slow because of its fragmentation and complexity. A typical project involves multiple parties, experts, processes, and tools, making it difficult to centralize, integrate, and secure them. Therefore, many of these companies still use manual, paper-based processes that are expensive and tedious to digitize. This creates a tremendous void that the IT and security industry must fill.
The growing role of technology introduces new risks
Despite all the barriers, IT has been gearing up for a rise among construction firms that recognize the benefits, such as increased productivity, better building quality, improved safety, and cost savings for the long-term. Traditionally known for its on-site hustle and paper trails, a significant portion of the construction industry has been undergoing a digital revolution.
The Internet of Things (IoT), GPS, telematics, roofing software, cloud-based project management tools, building information modeling (BIM), and artificial intelligence (AI) – these terms have entered the vocabulary of construction engineers.
If we pair that with vendor dependencies, significant personnel turnover, data sharing outside the organization, and the increasing use of mobile devices and offices, it becomes clear that construction companies are more susceptible to cybercrime than ever before. The 2020 Maze ransomware attacks on French company Bouygues Construction and Canadian firm Bird Construction were the wake-up calls.
The occasionally sloppy software update hygiene can also play into attackers’ hands. It’s common for many construction companies to use legacy IT systems and outdated applications with unpatched security holes that adversaries can exploit at will. To top it off, a lack of adequate cybersecurity awareness, often not a priority across the industry, makes workers highly susceptible to threats like phishing.
Unfortunately, many of these companies still follow the “brick-and-mortar” paradigm while going digital, only to miss out on effective cybersecurity mechanisms like firewalls, automated penetration testing, and intrusion detection systems. We need to correct this disconnect.
How to bridge the cybersecurity gap in construction
Given its complexity and resistance to change in the industry, the road to digital transformation will continue on a bumpy road. Here are the security practices construction firms can leverage to make the most of IT and avoid cyberattacks:
In a way, the construction industry has little choice but to go down the road of dynamic digital transformation. Therefore, now’s the time to build a solid security foundation for the shift. These nine tips can help builders – and most any other type of business – modernize.
David Balaban, owner, Privacy-PC
