Cybersecurity assessment of BIM/CDE design environment using cyber assessment framework

Turk, Žiga (author), Sonkor, Muammer Semih (author), Klinc, Robert (author)

Digitalisation of the construction industry is exposing it to cybersecurity risks. All phases of construction can be affected. Particularly vulnerable are information-intensive phases such as building design and building operation. Construction is among the last industries that are discovering its cybersecurity risks and can rely on frameworks developed for other contexts. In this paper, we evaluate the cybersecurity risks of the design phase of construction using the Cyber Assessment Framework from the National Cybersecurity Centre (NCSC) of the UK. The goal of this study is twofold. First, to examine cybersecurity risks themselves, and second, to evaluate the applicability of the NCSC framework for construction to see if and how construction is specific. The analysis shows that the cybersecurity risks follow the information impact curve that has been motivating the introduction of Building Information Modelling (BIM). The framework is applicable but is weak in addressing the specifics of the construction industrial ecosystem, which involves a multitude of dynamically connected actors, their overlapping authorities, and conflicting motives. It is suggested that a specialized construction-related framework should be developed.

• Language: English
• Keywords: construction, designing, cybersecurity, building information modelling, common data environment, integrated project delivery
• Work type: Article
• Typology: 1.01 - Original Scientific Article
• Organization: FGG - Faculty of Civil and Geodetic Engineering
• Publication status: Published
• Publication version: Version of Record
• Year: 2022
• Number of pages: Str. 349–364
• Numbering: Vol. 28, iss. 5
• PID: 20.500.12556/RUL-137056
• UDC: 004.9:624
• ISSN on article: 1392-3730
• DOI: 10.3846/jcem.2022.16682
• COBISS.SI-ID: 107180547
• Publication date in RUL: 31.05.2022

Record is a part of a journal

• Title: Journal of civil engineering and management
• Shortened title: J. civ. eng. manag.
• Publisher: Vilnius Gediminas Technical University, Academia scientiarum Lithuaniae
• ISSN: 1392-3730
• COBISS.SI-ID: 3676257

Licences

• License: CC BY 4.0, Creative Commons Attribution 4.0 International
• Link: http://creativecommons.org/licenses/by/4.0/
• Description: This is the standard Creative Commons license that gives others maximum freedom to do what they want with the work as long as they credit the author.

Secondary language

• Language: Slovenian
• Keywords: gradbeništvo, načrtovanje, kibernetska varnost, informacijsko modeliranje gradenj, skupno podatkovno okolje, celostna izvedba projekta

Projects

• Funder: ARRS - Slovenian Research Agency
• Project number: P2-0210
• Name: E-gradbeništvo