Construction SuperConference 2017

E11 We've been hacked! What do we do now? (Room Chopin 1)

As the construction industry becomes more and more digitally connected, the risks of a data breach and its potential costs also goes up. A construction company presents an attractive target not only to elements looking for financial or employee information, but also for persons with a more malicious intent of procuring information on industrial control systems, or critical infrastructure design. This program will discuss four potential sources of data breach - spear phishing, subcontractor vulnerability, stolen laptop, and a disgruntled employee. The panel consisting of technical and legal experts and in-house counsel will discuss the potential risks in each of these scenarios, including third party claims, business interruption, data restoration expenses, and potential fines or penalties. We will discuss the ways in which preparedness can reduce risks and costs, and outline how to develop an incident response plan, so you are prepared to mitigate the risk when the data breach happens. The panel will also discuss other risk mitigation strategies including indemnity clauses and cyber insurance. Further, the panel will discuss potential responses in each of these scenarios, and the various considerations involved in those responses.

Upon completion of this session, participants will be able to:

  • Gain an understanding of typical data breach incidences that construction firms can face, and how to respond to each scenario.
  • Understand the implications of a data breach.
  • Proactive approaches that can help mitigate cyber risks and costs in the construction industry.