What Cybersecurity risks should Concern Me? Construction HSEQ environment

Cybersecurity is applicable to more than just IT departments and office environments. With the increased reliance on connected tools, cloud platforms, and smart systems on-the-ground staff of construction sites, plant personnel, everyone must be aware of potential cyber threats. The risks are real and dangerous to companies, as they evolve faster than the awareness of employers/employees.

What Types of Cybersecurity risks are Common for Construction?

Construction sites have transformed dramatically as technology has entered the fray. Drones can now manage site surveys and mobile apps can facilitate logistics. So, what are some of the key cybersecurity incidents that may arise when working on a construction site?

    • Phishing attacks targeting site managers or contractors via email, text, phone call
    • Documentation theft via unsecured Wi-Fi or cloud storage
    • Disruption of security systems of site entrance systems

Case study: Bouygues Construction Ransomware Attack

Let’s explore a real-life example of the impact of cybersecurity failures on a construction site.

In 2020, Bouygues Construction, a major French construction firm, was hit by a ransomware attack. The attackers gained access to internal systems and stole sensitive data before demanding a ransom from their victim. This resulted in major disruptions to operations for Bouygues:

    • A shutdown of IT systems
    • A delay in all construction projects
    • Reputational damage to their brand
    • Loss of trust with their clients

There are several contingencies that can be implemented to mitigate the likelihood of this happening:

    • Backing-up the system to a secure cloud-based software regularly, minimizing the number of documents held offline
    • Implementing multi-factor authentication to protect access to data
    • Employee training on the handling of sensitive data and awareness of different types of phishing

To learn more about this case study: Cybersecurity Insiders

Lack of Digital Awareness, Rise in Physical Risk

Cyber breaches can directly affect physical operational aspects in the construction industry, such as worker safety, project timelines, and site compliance. A hacked system can place a threat to real-world structures and consequently, human lives. It is critical that cybersecurity is treated like PPE. Non-negotiable.

As technology expands more and more into the construction industry, so do the threats that come with it. Cybersecurity needs to be embedded into every step, from concept design to final sign-off of the project. It is about having strong foundations physically and technically.

To find out how our FlexManager system can help you with adapting to latest age of technology, please get in touch with our team through our Contact section on FlexManager.com.

Authored by Gearoid Noone

LinkedIn
Email
Facebook

Topics you may have missed

What Good Looks Like: On-site Audits & Inspections

What Good Looks Like: On-site Audits & Inspections On-site audits and inspections are a core part of HSEQ and compliance. But when they are not managed well, they quickly become a source of stress. Missed checks, inconsistent records, and unclear follow-ups can lead to more than just admin headaches. They create real risks around safety,…

Read more
FlexManager offers strategic incident reporting for better compliance.
Module Spotlight – Incident Reporting
,

Peter Mullins, Director of Business Development at FlexManager, gives an overview of our Incident Reporting module, covering how incidents can be created and categorised by type, each with its own bespoke review workflow, and how the module connects directly into Asset Management and Training records.

Read more
FlexManager presents Asset Management compliance solutions.
Asset Management with FlexManager: Scan, Identify, Know Everything Instantly
, ,

Struggling with missing assets or unknown locations? FlexManager's Asset Management module uses NFC technology to give every asset a digital identity, so your team can scan, identify, and know everything instantly. As part of our Plant & Equipment core solution, this module offers organisations control and oversight of their stock, in an efficient, real-time platform that is designed to fit your process. 

Read more