Assessing awareness of cybersecurity threats among construction professionals: perspective of developing countries

Purpose This study examines cybersecurity awareness among construction professionals in developing countries, investigating variations across different professional roles and organizational contexts to identify critical vulnerabilities and inform targeted intervention strategies in an industry that has become the second most targeted sector for cyberattacks globally. Design/methodology/approach An explanatory sequential mixed-methods design was employed, combining quantitative surveys with qualitative interviews. A validated 19-item cybersecurity awareness questionnaire was administered to 115 construction professionals, including Engineers, Quantity Surveyors, Architects, Project Managers and Construction Managers from consulting and contracting firms. On the other hand, the qualitative component consisted of seven (7) face-to-face interviews, which offered insights into organizational practices. Data analysis included frequency distributions, Kruskal–Wallis tests and thematic analysis. Findings Significant variations in cybersecurity awareness were observed across professional roles, with Architects demonstrating consistently higher awareness levels compared to Engineers, who showed concerning knowledge gaps in incident reporting, data encryption, and organizational policies. While fundamental cybersecurity concepts, such as password security, were well understood, substantial deficiencies existed in operational cybersecurity practices. Qualitative findings revealed pervasive “organizational silence, i.e. reluctance to openly discuss cybersecurity,” with widespread delegation of security responsibilities to IT departments and limited integration of cybersecurity into regular training programs. Practical implications The findings underscore the need for profession-specific cybersecurity training programs that address the distinct professional responsibilities and risk exposures associated with each profession. Furthermore, as the construction industry in developing countries undergoes digital transformation, it highlights the need for investments in both technological infrastructure and human capacity building to enhance industry resilience. Originality/value In this fast-paced digital evolution, the study's novel contribution lies in highlighting the often-overlooked human-related vulnerabilities within the construction industry's cybersecurity landscape, by systematically assessing the awareness of construction professionals amidst increasing digital integration.