Cyber attacks: a major risk for your construction projects
16 January 2024 — Events
Against a backdrop of rapid digital transformation, the construction sector is facing a growing and omnipresent challenge: cyber attacks. The statistics reveal an alarming reality, with more than half of companies in the sector affected in 2019 (Digital trust Insights), a 35% global increase in attacks by 2022, and a significant 21% rise in the public sector in France (Source: Anozr Way – People-Centric Cyber Protection). These figures underline the scale of the threats to the security of construction projects.
Cyber attacks in the construction sector
1. Increased vulnerability in 2019
Looking back to 2019, a detailed analysis reveals a worrying reality for the construction sector. More than half of the companies operating in this field have been targeted by cyber attacks. These figures indicate an intrinsic vulnerability, clearly signalling that construction stakeholders were already facing significant IT security challenges.
2. Worldwide increase in 2022
The rapid evolution of cybercrime is highlighted by data from 2022. Globally, a cyber attack was recorded every three hours, representing an alarming increase of 35% compared with 2019. This increased frequency underlines the rapidly evolving tactics of cybercriminals and highlights the critical need for an adequate and proactive response.
3. Focus on cyber attacks in the French public sector
Particular attention should be paid to the situation in France, where the public sector has seen a significant 21% increase in cyber attacks in 2022. The need for enhanced security is becoming imperative to preserve the integrity of sensitive data and ensure the smooth continuity of construction projects. This situation calls for in-depth reflection on existing security measures and the implementation of innovative solutions to counter emerging threats.
4. Critical issues for security in the construction sector
The convergence of these factors highlights the critical issues for security in the construction sector. Cyber attacks are no longer hypothetical scenarios, but realities that can compromise the confidentiality of data and the successful completion of projects. The need for urgent action to strengthen security is becoming inescapable, given the considerable financial and operational risks that these attacks represent.
Financial and operational consequences
1. Heavy financial losses in 2022
The year 2022 was marked by massive financial losses resulting from cyber attacks, estimated at €2.8 billion (source: Anozr Way). This colossal sum underlines the considerable economic impact of cyber attacks. These losses are not just about numbers, but also represent substantial obstacles to project implementation, business growth and the overall health of the sector.
2. Construction ranked 6th in terms of operational vulnerability
An in-depth analysis of the sectors affected by cyber attacks reveals that construction ranks 6th in terms of operational vulnerability (source : Anozr Way). This position highlights the critical nature of this threat to the day-to-day activities of companies in the sector.
In addition to the financial consequences, computer attacks can seriously disrupt the continuity of construction projects. Operational interruptions, project delays and budget revisions become realistic scenarios, jeopardising the completion of construction projects.
As construction is a time-critical industry, these interruptions can have lasting repercussions, both in the short and long term.
3. Far-reaching implications for data confidentiality
These attacks also have direct and far-reaching implications for data confidentiality in the construction sector. Sensitive information, be it construction plans, financial data or personal data, is exposed to substantial risks. The loss of confidentiality can not only have financial consequences, but can also compromise the reputation of construction companies and the confidence of stakeholders.
4. The need for risk mitigation
Faced with these realities, it is becoming imperative for stakeholders in the construction sector to develop risk reduction strategies that go beyond simple data protection. Operational security must be a core concern, with investment in resilient systems, robust business continuity plans and heightened awareness among teams.
The need for greater security in the construction sector
Companies in the sector are facing increasing and varied threats that require an immediate and proactive response. Protecting data and guaranteeing the continuity of projects requires a proactive response, putting cyber security at the heart of national concerns to ensure the sustainability and resilience of the construction sector in France.
1. Proposals for concrete measures
Faced with this worrying reality, it is imperative that the construction sector adopts concrete measures to enhance its security. This means:
- Investment in cyber security technology: adopting advanced technological solutions such as early threat detection, malware protection and identity management to strengthen the security posture.
- More training in cyber security: raise awareness and train staff at all levels in cyber security best practice, so as to reduce the risks associated with human error.
- Public-private sector collaboration: encourage close collaboration between public and private stakeholders to share information on threats, develop cybersecurity standards and implement coherent national strategies.
- Implementation of robust business continuity plans: Develop robust business continuity plans to minimise disruption in the event of an attack, ensuring a rapid and effective response.
- Regular security audits: implement regular audits to evaluate and constantly improve security measures, ensuring that they are continually adapted to changing threats.
- Secure data storage: opt for a SecNumCloud (ANSSI) certified cloud solution. This certification offers specific standards enhancing the security of cloud services, ensuring greater data protection in the construction sector. Integrating SecNumCloud into cloud infrastructures is a proactive approach to strengthening resilience against cyber attacks.
The impact of cyber attacks on the construction industry is undeniable and requires an immediate response. The considerable financial losses, major operational risks and growing threat in France underline the urgent need to strengthen cyber security. The future of construction lies in the ability to build a robust defence against the cyber threats that threaten its continued growth.