Building digital trust in CDE-based BIM workflows : key strategies

Brelih, Anja (author), Klinc, Robert (author)

The adoption of Building Information Modeling (BIM) and Common Data Environments (CDE) in construction has increased the need for robust security and privacy frameworks, especially as these platforms increasingly leverage cloud-based technologies. This paper examines the mechanisms required to protect sensitive project data in BIM and CDE environments, including financial data, intellectual property and personal data. It emphasises the crucial role of trust — cognition-based, affect-based and system-based — in promoting safe and collaborative workflows and explores the concept of digital trust as a foundation for reliable partnerships in cloud-based construction environments. A critical analysis of ISO 19650-5 identifies significant gaps in addressing the complexity of cyber security and argues for explicit technical guidelines to protect against cyber threats. It also highlights inconsistencies in the transparency of security practises of widely used BIM and CDE providers and emphasises the need for improved disclosure to increase user trust. To provide a structured approach to threat mitigation, we introduce the Process for Attack Simulation and Threat Analysis (PASTA) framework and demonstrate its applicability in aligning business and technical risks within BIM and CDE workflows. In addition, this paper proposes to integrate security requirements into the BIM Execution Plan (BEP) to improve alignment across all project phases. Recommendations are provided for providers and users to establish a trust-based approach to information security that ensures compliance with standards and promotes the resilience of construction workflows. This paper highlights practical pathways to enhance the security of BIM and CDE implementations, focusing on robust technical safeguards and the role of trust in collaborative projects.

• Language: English
• Keywords: building information modeling, BIM, common data environment, CDE, digital trust, security, PASTA methodology, standardization
• Work type: Article
• Typology: 1.01 - Original Scientific Article
• Organization: FGG - Faculty of Civil and Geodetic Engineering
• Publication status: Published
• Publication version: Version of Record
• Year: 2025
• Number of pages: Str. 524-543
• Numbering: Vol. 30
• PID: 20.500.12556/RUL-168199
• UDC: 69:004
• ISSN on article: 1874-4753
• DOI: 10.36680/j.itcon.2025.022
• COBISS.SI-ID: 231135491
• Publication date in RUL: 02.04.2025

Record is a part of a journal

• Title: Journal of information technology in construction : ITcon
• Shortened title: J. inf. tech. constr.
• Publisher: Advelingen för byggadministration, Kungl. Tekniska högskolan, CIB - International Council for Research and Innovation in Building and Construction, W 87 - Information Technology for Construction
• ISSN: 1874-4753
• COBISS.SI-ID: 633185

Licences

• License: CC BY 4.0, Creative Commons Attribution 4.0 International
• Link: http://creativecommons.org/licenses/by/4.0/
• Description: This is the standard Creative Commons license that gives others maximum freedom to do what they want with the work as long as they credit the author.

Secondary language

• Language: Slovenian
• Keywords: informacijsko modeliranje gradenj, skupno podatkovno okolje, digitalno zaupanje, varnost, metodologija PASTA, standardizacija

Projects

• Funder: ARIS - Slovenian Research and Innovation Agency
• Project number: P2-0210
• Name: E-Gradbeništvo