Analysis of Cybersecurity Maturity and Deficiencies in the Real Estate and Construction Sector Facing Digital Transformation
Article Sidebar
Main Article Content
Abstract
The construction and real estate sectors have been undergoing a significant technological transformation, adopting a variety of modern tools such as Building Information Modeling (BIM), Digital Twins, Artificial Intelligence, and more. However, this digitalization has outpaced the sector's ability to defend its digital assets. Unlike manufacturing or banking, construction lacks established cybersecurity frameworks, leaving financial, technical, and personnel information vulnerable to systemic risks of espionage and sabotage. 2) Objective: The intention of this study is to diagnose this cybersecurity gap in the industry and uncover some structural and cultural weaknesses that hinder effective defense. The program seeks to compare digital maturity across different industries and propose risk management technologies adapted to the ever-changing landscape of construction projects. 3) Methodology: Data collection was qualitative, based on a Systematic Literature Review (SLR). From classified databases, 20 high-impact scientific articles (2021-2025) were selected and reviewed in depth, examining case studies from various countries, including, but not limited to, Australia, the UK, Asia, and the Arab world. 4) Main findings: It was found that “information security” plays a role in shaping the psychological and technical aspects of BIM and Smart Contract adoption. Risks were observed to be both technological and human, due to low risk perception and weak organizational discipline. Furthermore, the use of generative AI (ChatGPT) without protocols opens up new privacy threats. 5) Key conclusions: It is concluded that instead of adopting generic IT tools, specific building models (e.g., CISS for reporting) should be developed, and information-sharing forums should be enabled for collective defense. Cybersecurity is a discipline for protecting strategic assets, not an operational cost.
Downloads
Metrics
Article Details
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
References
A. Salykov, U. Z. Shalbolova, y A. Junusova, «Transformation in Kazakhstan’s construction industry amidst digitalisation of the economy», Infrastructure Asset Management. ICE Publishing, 2024. doi: 10.1680/jinam.24.00037.
F. H. Abanda, N. Jian, S. E. Adukpo, V. V. Tuhaise, y M. Blanche Manjia, «Digital twin for product versus project lifecycles’ development in manufacturing and construction industries», Journal of Intelligent Manufacturing, vol. 36, n.o 2. Springer, pp. 801-831, 2025. doi: 10.1007/s10845-023-02301-2.
Ž. Turk, B. García de Soto, B. R. K. Mantha, A. MacIel, y A. Georgescu, «A systemic framework for addressing cybersecurity in construction», Automation in Construction, vol. 133. Elsevier B.V., 2022. doi: 10.1016/j.autcon.2021.103988.
N. K. Bús y Z. Nyikes, «Cyber Security Challenges in Construction», Advanced Sciences and Technologies for Security Applications, vol. Part F2433. Springer, pp. 509-518, 2024. doi: 10.1007/978-3-031-47990-8_44.
S. M. Badi y M. Nasaj, «Cybersecurity effectiveness in UK construction firms: an extended McKinsey 7S model approach», Engineering, Construction and Architectural Management, vol. 31, n.o 11. Emerald Publishing, pp. 4482-4515, 2024. doi: 10.1108/ECAM-12-2022-1131.
M. S. Sonkor y B. García de Soto, «Using ChatGPT in construction projects: unveiling its cybersecurity risks through a bibliometric analysis», International Journal of Construction Management, vol. 25, n.o 7. Taylor and Francis Ltd., pp. 741-749, 2025. doi: 10.1080/15623599.2024.2355782.
G. Alfalah, A. Al-Sakkaf, E. Mohammed Abdelkader, S. Rawdhan, M. E. Shaawat, y O. S. D. Alshamrani, «Studying Potentials and Barriers of Successful Implementation of Smart Contracts in Saudi Arabia’s Construction Industry», Advances in Civil Engineering, vol. 2024, n.o 1. John Wiley and Sons Ltd, 2024. doi: 10.1155/adce/9646556.
D. Yao, B. R. K. Mantha, y B. G. de Soto, «Implementation of the Cybersecurity Incident Severity Scale (CISS) to Assess Cyber Incidents in the Construction Sector», Proceedings of the International Symposium on Automation and Robotics in Construction. International Association for Automation and Robotics in Construction (IAARC), pp. 657-664, 2025. doi: 10.22260/ISARC2025/0086.
S. D. Siriwardhana, R. C. Moehler, y. Fang, «Exploring the Determinants of Construction 4.0 Implementation in Australian Construction Industry: A SWOT Analysis», Lecture Notes in Civil Engineering, vol. 591 LNCE. Springer Science and Business Media Deutschland GmbH, pp. 830-841, 2025. doi: 10.1007/978-981-96-4051-5_80.
D. Yao y B. García de Soto, «Integrating Machine Learning for Cyber Risk Analysis in Construction 4.0», Lecture Notes in Civil Engineering, vol. 629 LNCE. Springer Science and Business Media Deutschland GmbH, pp. 76-91, 2025. doi: 10.1007/978-3-031-87364-5_7.
R. Isa, H. E. A. Baharuddin, y A. F. Othman, «Impacts of Cybersecurity Threats on Construction Stakeholders in Malaysia Amidst Industrial Revolution 4.0», Built Environment Journal, vol. 21, n.o S1. MARA University of Technology, pp. 49-58, 2024. doi: 10.24191/bej.v21iSI.2445.
R. W. Wu, T. W. Yiu, y M. Babaeian Jelodar, «Real-time Employee Monitoring Technologies in the Construction Sector - Effect, Readiness and Theoretical Perspectives: The case of New Zealand», IOP Conference Series: Earth and Environmental Science, vol. 1101, n.o 8. Institute of Physics, 2022. doi: 10.1088/1755-1315/1101/8/082010.
A. N. Skytterholm y M. G. Jaatun, «Exploring the Need for a CERT for the Norwegian Construction Sector», Springer Proceedings in Complexity. Springer Science and Business Media B.V., pp. 57-73, 2023. doi: 10.1007/978-981-19-6414-5_4.