Survey Findings on Cybercrime and Cybersecurity Practices in The Mena Construction Industry

Abstract

Cyberattacks are becoming more frequent and sophisticated, targeting all sectors that utilize information and operational technologies. Considering the accelerating digitalization and automation, which expands the attack surface, construction is an increasingly targeted industry by malicious actors. High volumes of cash flow, large amounts of sensitive data, and complex supply chains of construction projects draw increased attention from potential cyber criminals. With this in mind, a survey was performed by New York University Abu Dhabi, Freshfields Bruckhaus Deringer, and Accuracy to measure the readiness and awareness of the Middle East and North Africa (MENA) construction sector against cybercrime and emerging cybersecurity risks. The survey, with the involvement of senior construction professionals from large companies, revealed a worrying reality: even the employees of large organizations with sufficient resources feel that they are not sufficiently prepared to prevent cyber incidents. Moreover, many expressed that they do not have the required measures and capabilities to mitigate cyber risks and investigate cybercrimes. This paper summarizes the findings from the survey and makes recommendations to construction companies to be better prepared for increasingly complex cybersecurity challenges. The findings emphasize the construction companies’ vulnerabilities against the fast-evolving cyber threats, and the recommendations mainly target the MENA construction companies, considering the complex nature of their projects, increasing use of the latest technology, and heightened data sensitivity.