Analysis of Cybersecurity Issues in Construction Industry in Digital Transformation

The construction industry is undergoing a profound digital transformation, driven by technologies such as Building Information Modeling (BIM), Internet of Things (IoT), drones, and 3D printing. While these innovations bring significant efficiency and productivity gains, they also introduce new cybersecurity risks. This study systematically reviews literature and industry reports to identify the most critical cybersecurity threats facing the construction industry, including ransomware, distributed denial-of-service (DDoS) attacks, and supply chain breaches. The findings reveal that ransomware remains the most financially damaging, with significant operational and reputational consequences, while human error and third-party vulnerabilities are the primary amplifiers of breach costs. The paper proposes three strategic mitigation measures—comprehensive employee training, AI-driven threat detection, and centralized security information and event management (SIEM) systems—adapted from the NIST framework to the specific context of construction. The main limitation of this study is its reliance on secondary data, which may not capture rapidly evolving threat landscapes or region-specific risks. Future empirical research should validate and refine the proposed strategies across diverse construction environments. By addressing these vulnerabilities, the construction industry can better secure its digital assets and safeguard critical infrastructure.