Purpose

Building information modelling (BIM) creates a golden thread of information of the facility, which proves useful to those with the malicious intent of breaching the security of the facility. A cyber-attack incurs adverse implications for the facility and its managing organisation. Hence, this paper aims to unravel the impact of a cybersecurity breach, by developing a BIM-facilities management (FM) cybersecurity-risk-matrix to portray what a cybersecurity attack means for various working areas of FM.

Design/methodology/approach

This study commenced with exploring cybersecurity within various stages of a BIM project. This showcased a heightened risk of cybersecurity at the post-occupancy phase. Hence, thematic analysis of two main domains of BIM-FM and cybersecurity in the built environment led to the development of a matrix that illustrated the impact of a cybersecurity attack on a BIM-FM organisation.

Findings

Findings show that the existing approaches to the management of cybersecurity in BIM-FM are technology-dependent, resulting in an over-reliance on technology and a lack of cybersecurity awareness of aspects related to people and processes. This study sheds light on the criticality of cyber-risk at the post-occupancy phase, highlighting the FM areas which will be compromised as a result of a cyber-attack.

Originality/value

This study seeks to shift focus to the people and process aspects of cybersecurity in BIM-FM. Through discussing the interconnections between the physical and digital assets of a built facility, this study develops a cyber-risk matrix, which acts as a foundation for empirical investigations of the matter in future research.

中文翻译：

---

支持 BIM 的设施管理 (FM)：审查网络攻击导致的风险

目的

建筑信息模型 (BIM) 创建了设施信息的黄金线，这对那些恶意破坏设施安全的人来说是有用的。网络攻击会对设施及其管理组织产生不利影响。因此，本文旨在通过开发 BIM 设施管理 (FM) 网络安全风险矩阵来描述网络安全攻击对 FM 的各个工作领域意味着什么，从而揭示网络安全漏洞的影响。

设计/方法/方法

本研究从探索 BIM 项目各个阶段的网络安全开始。这表明入住后阶段的网络安全风险增加。因此，对建筑环境中 BIM-FM 和网络安全两个主要领域的主题分析导致了一个矩阵的开发，该矩阵说明了网络安全攻击对 BIM-FM 组织的影响。

发现

调查结果表明，现有的 BIM-FM 网络安全管理方法依赖于技术，导致对技术的过度依赖以及对人员和流程相关方面的网络安全意识的缺乏。这项研究揭示了入住后网络风险的重要性，突出了因网络攻击而受到损害的 FM 领域。

原创性/价值

本研究旨在将重点转移到 BIM-FM 中网络安全的人员和流程方面。通过讨论已建成设施的物理资产和数字资产之间的相互联系，本研究开发了一个网络风险矩阵，作为未来研究中对该问题进行实证调查的基础。