Bringing Change in Construction: Analysing Strategies for Managing Cybersecurity Disasters in the South African Construction Industry

Abstract

This study explored strategies for managing cybersecurity risks in the South African construction industry. Using a quantitative research methodology, the study targeted construction professionals and cybersecurity experts in Gauteng province through structured questionnaires, of which 150 were distributed and 90 were retrieved. The data was analysed using descriptive statistics, exploratory factor analysis (EFA), and correlation techniques to identify key cybersecurity risks and evaluate the effectiveness of existing strategies using Statistical Package for the Social Sciences (SPSS) software. The findings showed that companies prioritise adopting new technology and responding to cyber threats, but struggle to integrate cybersecurity into overall business strategies. Many firms focus on either strategic planning or cybersecurity, rarely balancing both due to resource limitations. The study concludes that bringing change requires a combined approach where cybersecurity measures align with strategic goals. Practical implications suggest that construction firms must invest in cybersecurity training, adopt stronger security policies, and use advanced technologies like AI and encryption. Companies should also improve stakeholder involvement to ensure that cybersecurity is a key consideration in project management. Future research should explore specific challenges preventing firms from fully implementing security measures and how government policies can support better cybersecurity practices. This study highlights the urgent need for a balanced approach to cybersecurity and strategic planning in the construction industry.