26 minute read

Industry News

Next Article
Grown for Good

Grown for Good

AroundtheIndustry

RETAIL

Dick’s Sporting Goods

The 100,000-square-foot Dick’s Sporting Goods recently opened in Eastview Mall in Victor, New York, features an indoor putting green, an outdoor track and a climbing wall. A second House of Sport location is scheduled to open in Knoxville, Tennessee later this year.

Lowe’s

Lowe’s will open an outlet store in part of a former full-service Lowe’s location to sell large kitchen and laundry appliances. The retailer has opened similar stores in markets, including Miami and Chicago.

Target Stores

Target appears to be on track to reach its goal of opening 30 to 40 stores this year with 12 new locations already operating, including a site along Hollywood’s Walk of Fame in Los Angeles and a small-format store near the University of Georgia campus.

Foot Locker

Foot Locker will convert about one-third of its 272 Footaction stores into Foot Locker locations and close the rest over the next two years as it focuses on its four higher-performing banners. The retailer plans to open 160 locations over the next year under its namesake, Kids Foot Locker, Eastbay and Champs banners.

Google

Google will open a retail store on the site of its corporate campus in New York City’s Chelsea neighborhood this summer to sell the company’s gadgets. The store will give consumers a chance to try items like Google’s Pixel phones, Nest thermostats and Fitbit wearables before they buy them.

The Container Store

The Container Store is working on a smaller store format to debut next year and considering options for in-store shops to keep the momentum going after a year of strong sales fueled by home organizing trends. Stores will also put a greater focus on demonstrations and staff expertise to increase service offerings.

Sotheby’s

Sotheby’s has officially unveiled its new permanent retail store in New York City. The store named The Emporium is located within the lower level of the auction house’s very own galleries and is expected to be the latest expansion of the growing Buy Now online marketplace.

M&M

Mall of America will be home to the sixth M&M’s store, as Mars Wrigley is returning to its roots with its new 24,000 square foot M&M’s store on the Bloomington megamall’s first floor (east side) near the Rotunda on Mall of America.

RESTAURANT

Wendy’s

Wendy’s is on a mission to grow from about 6,800 units to 8,000 global locations over the next few years and has expanded its store design options to cater to new consumer demands and franchisees’ needs. New formats include drive thru-only locations and mobile dark kitchens, and the chain has also created an incentive program for franchisees to encourage more multiunit operators.

Panera Bread

Panera Bread has unveiled a new store format that features updated ordering kiosks and a second drive-thru dedicated to order pickup. Other features of the new store design, which is scheduled to debut in Missouri later this year, include the ability to do contactless transactions for both dine-in and delivery.

Saladworks

Saladworks, which has seen success with its locations inside Kroger and ShopRite stores, plans to add 25 to 30 similar in-store sites this year and more than 100 in 2022, as it pivots to meet demand caused by the pandemic-related closings of salad bars and deli counters. The company also wants to expand its ghost kitchen sites from the 90 it now has mainly inside Walmart stores to more than 400.

Walk-On’s Sports Bistreaux

Louisiana-based casual dining chain Walk-On’s Sports Bistreaux will grow to 52 units this month and plans to open at least 20 new restaurants this year. The chain is developing smaller footprints in response to growing demand for off-premises dining during the pandemic.

Blaze Pizza

Blaze Pizza plans to grow from 340 locations to more than 800 by 2025 and has recently announced plans for 16 units in Florida, Texas and Tennessee.

Ground Round/GR Kitchen & Taps

Casual dining chain Ground Round has partnered with a Best Western Hotel in Waterloo, Iowa, to create a beer-centric concept called GR Kitchen & Taps. The franchised location will act as the foodservice facility for the hotel, offering a wide selection of craft beers and a menu featuring plant-based options and indulgent desserts.

Los Chingones

Mexican casual eatery Los Chingones plans to open a location in Fort Collins, Colorado this summer, with 10 more anticipated over the next couple of years.

IHOP/ Flip’d by IHOP

IHOP has taken plans to grow its Flip’d by IHOP fast-casual concept off the back burner after pausing earlier in the pandemic, and it will pay the first 10 franchisees $150,000 each to expedite the opening process. The first Flip’d by IHOP unit will open in New York City this summer and three more are planned for Kansas and Ohio.

Auntie Anne’s/Jamba

Focus Brands has opened a co-branded unit that brings together Jamba and Auntie Anne’s, giving the largely mall-based pretzel chain its first drive-thru location. The Texas location is the first of what’s expected to be a growing number of non-mall locations for Auntie Anne’s and Focus Brands plans to debut more co-branded stores, including locations that combine its Cinnabon and Carvel brands.

7-Eleven

A new 7-Eleven store in Manassas, Virginia includes two restaurants: Parlor Pizza and the convenience store’s second Raise the Roost Chicken and Biscuit. 7-Eleven intends to open almost 150 restaurants this year.

Shake Shack

Shake Shack will open 40 new global restaurants this fiscal year and as many as 50 new locations in 2022, with a focus on expanding in Asia. New units will open in the coming months in Singapore and Macao, as well as Beijing, Shenzhen and Guangzhou in China.

HOSPITALITY

IHG Hotels & Resorts

IHG Hotels & Resorts is adding seven cities to its avid hotels brand, including three in fast-growing Texas.

St. Regis Hotels & Resort

Luxury brand St. Regis Hotels & Resorts plans a near-doubling of its portfolio by 2024, with Aruba, Bermuda, the Dominican Republic, Jamaica and Marrakech among the locations.

Hilton Hotels

Hilton has officially announced that Tempo by Hilton and Motto by Hilton, two of the company’s lifestyle brands, will grow to include 11 new hotels.

Marriott Autograph Collection

Pittsburgh’s manufacturing history harmonizes with contemporary comfort in the city’s new Industrialist Hotel, once the site of American Standard’s downtown headquarters. The hotel is Pittsburgh’s second in the Marriott Autograph Collection, following The Oaklander, which debuted in 2019.

Global Ambassador

Internationally noted Arizona restaurateur Sam Fox plans to open an upscale hotel in Phoenix in 2023, featuring a cosmopolitan mix of design and cuisine. The 141-room Global Ambassador is the first venture by Fox’ new company, Author and Edit Hospitality.

Rosewood Hotels and Resorts

Rosewood Hotels and Resorts plans to open its 20th hotel in the Americas in 2024. An expansion of the Antara mixed-use complex, the Rosewood Mexico City will feature 133 rooms, including 35 suites, with a spa, two pools and four dining options among its amenities.

Hotel St. Vincent

A new upscale boutique hotel in New Orleans occupies an imposing Victorian building that was founded as an orphanage during the Civil War. The Hotel St. Vincent, which bears the name of the children’s sanctuary, was developed by entrepreneur Zachary Kupperman, who bought the property four years ago when it was functioning as a budget hostel.

Marriott Springhill Suites/Ronald McDonald House

The Marriott Springhill Suites in Albuquerque, New Mexico is host to the first Ronald McDonald House built inside a hotel. The 20room Highland House across the street from Presbyterian Hospital is a joint project of Ronald McDonald House Charities of New Mexico and Titan Development.

Harrah’s Cherokee Casino and Resort

An opening date has not yet been set, but a $330 million project at Harrah’s Cherokee Casino and Resort in Cherokee, North Carolina is on track to be completed by late fall. The upgrades include a new convention center, a hotel tower with 725 guest rooms and a 2,000-space parking deck.

Wyndham Hotels & Resorts

Wyndham Hotels & Resorts plans to open 180 hotels in Asia and the Pacific this year after adding 125 properties in those regions during the pandemic. China will play host to about 100 of the new hotels, with Australia, New Zealand, South Korea, Taiwan, Thailand and Vietnam also in the mix.

Your 5-step assessment plan to managing construction risk

Construction is a risky industry. Besides being one of the most dangerous industries for workers, there are risks across every stage of a project. The complexity of construction projects create an ever-present environment of uncertainty and risk. Risks such as weather issues, safety concerns, budgetary concerns and project delays, to name a few, can appear in any form, at any stage of the construction process. All risks can adversely impact project performance, compromising quality, increasing costs and delaying project completion.

Risk also is expensive. It is likely that contractors will at some point deal with controversy that erupts into litigation. Some of the biggest challenges for contractors in litigation include determining who said what and when, and locating all the supporting documentation. If all the information is not centrally located, sorting through layers of data and paperwork can be time consuming and can quickly turn into a “he-said, shesaid,” ultimately eliminating the validity of each party’s claims. Construction risk is everywhere: incomplete contract documents, communication breakdowns, poor document tracking and information silos. If there is a breakdown in one of these areas, it could lead to project delays further down the line, potentially going down the path of litigation. By first understanding the risks associated with errors in contracts or lack of communication across teams, general contractors can then find solutions that not only help manage risks, but also help limit them as much as possible. Anything from a contract modification to a schedule change or from paper documentation to using word of mouth can introduce risks to a project, further affecting jobsite performance. To overcome this, GCs are turning away from outdated, ad-hoc methods and implementing new strategies to manage risks.

Managing construction risk

Risk management is crucial to the success of a project in the construction industry. The dynamic and complex nature of construction projects and the associated wide-ranging risks make integrating risk management strategies across the entire lifecycle of a project event that much more important.

An effective starting point for GCs is conducting a risk assessment that: 1. Identifies and describes critical issues related to a project, allowing the project team to focus on risk factors of potential concern 2. Evaluates the project risk exposure and provides an indication of its potential impact of risk during the project’s life cycle 3. Indicates which components of the project should be considered for risk mitigation as part of an overall risk management strategy 4. Focuses analysis on issues unique to each project 5. Is flexible to meet the needs of almost any individual project

Prior to starting construction, it also is important to plan for risks and run “what if” scenarios to ensure the risks are known and to determine protocols if something were to happen. And as the project progresses, it’s vital to continue to monitor for risk, as information and plans might change along the way.

GCs turning to technology

Risk is a fundamental aspect of construction projects. To overcome the challenges presented by the numerous risks associated with a project, many GCs are turning to

construction management software, which is built to improve operational transparency, documentation workflows and data collection to bring more certainty to construction projects, improve project outcomes and increase profitability. By deploying cloud-based technology, a GC can break down data silos by centralizing communication and providing real-time visibility into projects as well as instant access to project documentation. It organizes information in a unified environment that allows all project stakeholders to seamlessly review and respond to critical documents and transactions, tracking every step along the way, enhancing communication and collaboration. Rather than returning to an office to submit change orders, RFIs, submittals and other important documents, cloud-based mobile technology makes it possible to prepare, file and instantly share critical documentation with members of both internal and external teams from anywhere. Documentation is an important component of reducing risk in construction projects large and small. Newer technology features document management tools that help construction firms track contracts, compliance, plans, specifications and more. In addition to saving time and money, the technology makes information more accessible, fosters a collaborative environment that keeps internal and extended project teams updated on the latest versions of documents, and helps teams complete projects according to plan. Construction management platforms also are helping make workflows become more seamless by enabling smoother collaboration between GCs and subcontractors, enabling more robust reporting by tracking both internal and external customer changes, improving jobsite safety through real-time communications tools and facilitating decision-making by allowing for a data-driven approach. Keeping risks under control can be challenging for contractors operating in an industry fraught with risk. But by taking the necessary precautions and by implementing construction management technology, GCs can improve financial results, increase jobsite safety, boost team collaboration and elevate the execution of a project all while avoiding costly claims, disputes and litigation. CCR

Frédéric Guitton is Chief Strategy Officer/CMO at RedTeam Software, a construction management platform that enables commercial contractors visibility across every stage of a project’s lifecycle.

Back to the Future

States adopt 2018 IBC Update, allowing for loftier podium buildings

Adozen states and two US territories, including California, Georgia, New Jersey and Puerto Rico, have adopted the 2018 International Building Code (IBC) update, which gives architects more flexibility when designing multifamily and mixed-use buildings that incorporate podium construction, also known as platform or pedestal construction. Podium construction is when a wood building is constructed on top of a concrete and steel building. The IBC considers these as separate buildings built on top of each other in layers, with the vertical order of the construction materials determined by their levels of combustibility. Should the more combustible wood building on top catch fire, the concrete podium base will resist the flames for enough time to allow occupants in the higher stories to safely escape to lower levels.

The 2018 IBC update specifies Type IA concrete and steel buildings—the most fire-resistant Type I steel building configuration—can be built up to three stories to form the base of a podium building. Type III and V wood construction, and less commonly Type IV mass timber, can be built on top. The 2018 update specifically allows podium buildings to be constructed to form a taller structure than was allowed in previous iterations. Podium construction is advantageous because it helps maximize the use of space within areas where land is scarce, while also reducing construction costs.

Concrete and Steel Podium Base

Concrete and steel building types are considered non-combustible because they can withstand fire for an extended period of time, while also helping prevent fire from spreading within a structure. Both Type I and Type II buildings are concrete and steel, but Type I is more fire-resistant, so the IBC allows for greater building heights in Type I. In fact, Type I buildings can be built to unlimited heights where local code permits. This is why Type IA buildings are specified as the base of podium buildings by the IBC. Though some states were already on the 2015 IBC version prior to adopting the 2018 update, others made a bigger jump from the 2012 or earlier IBC versions. In the 2012 IBC, Type IA podiums were allowed to be built up to one story; the 2015 edition allows for podiums two stories tall, while the 2018 update increased the allowance to three stories.

Since wood is the most flammable building material, Type III and Type V buildings are height-limited to four stories. When Type III buildings use FRT lumber, the limit is increased to five stories.

Type III and V: Wood Construction

Type III construction allows for interior building elements to be built of any material permitted by the IBC, including wood, but the exterior walls must be non-combustible. Fire-retardant-treated wood (FRT) framing can be incorporated into the exterior walls of Type III buildings to allow for greater heights. Type V allows for any materials permitted by the code to be used in interior and exterior building elements. Since wood is the most flammable building material, Type III and Type V buildings are height-limited to four stories. When Type III buildings use FRT lumber, the limit is increased to five stories. Combined with a three-story podium base, wood construction can increase the total height of a building to eight stories.

On the Horizon: Higher Limits for Type IV Mass Timber Construction

Type IV mass timber, which consists of heavy beams at least 6 inches thick, can be built up to five stories because its decreased surface area makes it less combustible than Type III or V buildings. While Type IV structures are less common in podium construction, the 2018 IBC allows for them to be constructed over Type IA podiums up to five stories. However, the International Code Council (ICC) approved a set of proposals in 2019 to allow for Type IV construction to reach up to 18 stories high. With the emergence of gluelam technology, which can be used to create mass timber from smaller pieces of lumber without harvesting huge, old trees, multifamily and mixed-use construction projects will be able to even further maximize real estate while reducing the impact on our planet’s vital old-growth forests.

Joe Alcock, AIA, LEED AP, NCARB, is the Atlanta office director and associate principal in the Housing and Mixed-Use Studio of McMillan Pazdan Smith, a regional, studio-based design firm with offices in Atlanta, Georgia; Charleston, Greenville and Spartanburg, South Carolina; and Asheville and Charlotte, North Carolina. He can be reached at jalcock@mcmillanpazdansmith.com.

The numbers game They said it

63 The percentage of people who say that travel will serve as a force for good in helping people reconnect with their family, friends and colleagues, according to Expedia Group’s “2021 Travel Trends Report. In addition, 53% say that travel is a form of healing.

“We are very good at marketing and creating brand new ideas so we figured now would be the time to try it.”

— John Terzian, co-founder of The H.Wood Group, on the restaurant group’s move to create a virtual brand

30 The percentage of hoteliers who say they are brand or management changes, according to the Hospitality Asset Managers Association’s biannual survey. In addition, the survey shows that approximately 5% believe they would change brands, 10% foresaw changing management companies and roughly 15% believe they would change both.

25 The number of former shopping malls that Amazon has turned into fulfillment centers between 2016 and 2019, according to Coresight Research. The company recently received approval to do the same with two additional malls in Louisiana and Tennessee. “Our playbook really hasn’t changed. If anything, this past year really supported it.”

— A&W CEO Kevin Bazner on drive-thrus and how its strong brand helped during the pandemic

“We’ve been gaining market share with our core customer, but also with the new customer: the millennial customer.”

— Tractor Supply CEO Hal Lawton on how Gen Y is driving growth at Tractor Supply

EONTM MODEL EL3

Three Phase Centralized Emergency Lighting Inverter Now Available Up To 55 kW!

LED Fixture / Driver Compatibility

High peak overload capability of 1700% to accommodate inrush current from LED fixtures / drivers while fed from the AC power source, or even while in battery mode.

Full Compliance With NFPA 101

Computer-based, self-testing / self-diagnostic emergency lighting system with data-logging and remote communications via BACnet, MODBUS, and Ethernet.

Compact, Space-Saving Footprint

Physically smaller than comparable three-phase emergency lighting inverter products, without compromising performance or serviceability.

10 kW – 55 kW Download a brochure and specifications today!

UL 924 Listed — Emergency Lighting Equipment C-UL Listed to CSA C22.2 No. 141-10; 141-15

www.controlledpwr.com/EON_1

To jab or not to jab…

Can COVID-19 vaccines be made mandatory for employees?

By Donald “Dino” Velez

The Equal Employment Opportunity Commission (EEOC) indicated that employers may implement mandatory vaccination programs, but such programs warrant care and/ or accommodations. One approach would be to “strongly encourage” rather than mandate vaccination. Here are some considerations employers must weigh in making a choice. What are my obligations to employees?

Employers must provide "employment and a place of employment which are free from recognized hazards that are causing or are likely to cause death or serious physical harm to employees” under federal OSHA safety rules. Employers must consider whether worksites can only be rendered safe by staffing with vaccinated workers.

What are some of the risks involved with implementing a mandatory vaccination program?

Any employer that implements a mandatory COVID-19 vaccination program should prepare for potential increased sick days, extended sick leave, worker’s compensation claims, and/or lawsuits from employees who experience side effects or complications. Employers also must consider that a large percentage of Americans are wary of vaccination. Employers should communicate early with employees about their concerns, as well as the benefits and safety of the vaccines.

Are there any specific considerations for employers with unionized workforces?

Under the National Labor Relations Act (NLRA), state laws and most collective bargaining agreements, employers must provide notice and an opportunity to bargain changes in working conditions. Mandatory vaccination constitutes a change in working conditions, triggering such requirements. The NLRA protects employees’ rights—whether unionized or not—to engage in “concerted activities” for “mutual aid and protection.” Employers should avoid restricting employees’ ability to collectively oppose, or discuss, a vaccination program.

Would administration of a COVID-19 vaccine be a “medical examination” under the ADA?

Administering the COVID-19 vaccine is not a “medical examination” for purposes of the Americans with Disabilities Act (ADA).

Can employers use pre-vaccination screening questions?

Pre-vaccination screening questions may implicate the prohibition on disability-related inquiries (under the ADA and/or the prohibition on inquiring into family medical history under the Genetic Information Nondiscrimination Act, or GINA). Screening questions must be job-related and consistent with business necessity. Employers must have a reasonable belief, based on objective evidence and/or data, that an employee who does not answer the questions and does not receive a vaccination, will pose a direct threat to the health or

safety of themselves or others. Screening questions may be asked without needing to satisfy the “job-related and consistent with business necessity” requirement in two situations. First, if the employer offers employees vaccination on a voluntary basis, then an employee’s decision to respond to screening questions is voluntary. If an employee refuses, the employer may decline to administer the vaccine. Second, employers who have employees receive the vaccine from a third-party should prepare to have employees sign forms authorizing release of information.

What about employees who object to being vaccinated because of existing medical conditions?

If an employer screens individuals with a disability, it must show an unvaccinated employee poses a “significant risk of substantial harm to the health or safety of the individual or others that cannot be reduced by reasonable accommodation.” Factors in determining whether a direct threat exists include: (a) duration of risk; (b) nature and severity of potential harm; (c) likelihood of potential harm; and (d) whether potential harm is imminent. Establishing that an individual presents a direct threat would “include a determination that an unvaccinated individual will expose others to the virus at the worksite.” If the risk cannot be reduced to an acceptable level, the employer may exclude

the unvaccinated employee. However, the right to exclude the employee from the workplace does not mean that the employer can terminate the employee, as he/ she may be entitled to accommodation, or to take leave provided by law or under the employer’s policies.

Most individuals who receive one of the COVID-19 vaccines do so free of charge. If there are any costs associated with the vaccine, employers may be required to cover those.

What about employees who object to receiving a vaccine on religious grounds?

Employers with more than 15 employees who fall under Title VII of the Civil Rights Act of 1964 (Title VII) must provide reasonable accommodations for employees whose sincerely-held religious beliefs or practices prevent them from receiving a COVID-19 vaccination, unless doing so would cause undue hardship on the employer. Under Title VII, an “undue hardship” means that the accommodation would impose more than a de minimis cost or burden on the employer. Employers contemplating a mandatory vaccination program should inform their employees as early as possible, and seek notice from employees whose religious beliefs and/or practices preclude them from vaccination. Employers should document attempts to accommodate those employees.

Are there any other grounds for objection that I should consider?

Although some federal laws impact qualified employers nationwide, every state and/or jurisdiction may have different rules for mandatory vaccination. Several states allow individuals to decline vaccinations on philosophical grounds. Other states allow individuals to decline vaccinations for any reason.

Do I need to provide paid time off for employees to receive the vaccine?

If an employer mandates vaccines for its employees, the time that employees spend obtaining these injections (including the travel time to and from the vaccination facility) are “hours worked’ for purposes of the federal Fair Labor Standards Act and any equivalent state laws.

Do I need to cover the cost of the vaccine for my employees?

Most individuals who receive one of the COVID-19 vaccines do so free of charge. If there are any costs associated with the vaccine, employers may be required to cover those. CCR

Donald “Dino” Velez, Of Counsel, is an attorney with Smith, Currie & Hancock LLP, in the firm’s San Francisco office. Smith Currie is a nationally recognized law firm focusing on construction law and government contracts. Contact Velez at davelez@smithcurrie.com. To learn more, visit www.smithcurrie.com.

Beating the unknown enemy

4 tips for upgrading cybersecurity at construction sites

By Corey Nachreiner

When it comes to adopting the latest cybersecurity technologies, the construction industry often is a step behind. In fact, according to the “2019 Travelers Business Risk Index,” nearly half of all construction executives believe their firms are destined to fall victim to a cyberattack, yet more than 68% admit they have not assessed their security risks or made any plans or preparations.

As a result, the industry continues to see attack after attack. For example, EMCOR (a Fortune 500 engineering and industrial construction firm) recently was hit by the ransomware strain called Ryuk. This virus is spread through phishing emails and has extorted more than $61 million from companies between 2013 and 2019 alone. While every business is vulnerable to cyberattacks, the construction industry faces unique challenges. Not only do they manage complex supply chains, disparate job sites and more, these organizations also rely upon critical IT resources such as smart devices, routers, construction software, Wi-Fi hotspots, etc., which they often use at temporary locations. With so many potential risks and a reputation for outdated or insufficient security controls, it comes as no surprise that 32% of MSPs report that the construction and manufacturing industries are the most targeted by ransomware.

In order to better build a better security posture, IT professionals at construction companies can leverage some key strategies and best practices. Here are four worth considering:

No. 1 — Start with Foundational Security Measures

Like other businesses, strong cyber security in the construction industry starts with fundamental layers of security. Any computing devices on site should be secured the same way it would be in a traditional office setting. Deploy firewalls, patch software regularly, back up your data frequently, enable core network security services and endpoint protections, etc. These are basic table stakes, but critical nonetheless. New generations of ruggedized security technologies including multi-function security appliances and Wi-Fi access points can address historical jobsite issues like heat, dust and moisture, while remote monitoring and management tools can allow IT professionals to execute updates and monitor alerts from a central location.

No. 2 — Understand Your Adversary’s Motivations

You cannot adequately protect company data without first understanding who might want to get a hold of it (as well as how and why). One of the main motivations for targeting a construction site is the theft of intellectual property, such as blueprints that could provide intelligence a criminal would need to defeat physical security in the future. Another could simply be compromising the supply chain to divert payments or extortion via ransomware. Attackers might even want to open a backdoor into a future tenant’s network by gaining control over the building automation systems being installed in a new development. Understanding these motivations can help you identify the best mix of security layers to implement in order to thwart attacks before they happen. No. 3 — Invest in Employee Education

Better cyber security awareness is a simple, but powerful measure you can take, especially given how wide ranging the level of technical skill and training is across construction teams and employees. Teach all managers, employees and contractors to identify phishing attempts, flag suspicious emails, calls, or wire transfer requests, and not click on every link they receive. These are just a few basic precautions you can take that will go a long way toward preventing breaches.

Some construction companies may already be undergoing digital transformation initiatives, using wireless or cellularly-connected rugged tablets and shared blueprints and plans on digital devices rather than paper.

No. 4 — Prioritize both Physical and Cyber Security

Some construction companies may already be undergoing digital transformation initiatives, using wireless or cellularly-connected rugged tablets and shared blueprints and plans on digital devices rather than paper. You might be using drones for site inspections or 3D printers for prototyping. Today’s cyber criminals are already targeting tablets, smartphones and other mobile devices, and while attacks on drones or 3D printers are not as common, they are possible. Regularly update these devices, change their stock passwords and assess them for potential compromises. It also is critical to understand how physical and cyber security impact one another since cyber attackers often gain access by simply walking through the front door. Physical security on site is often more focused on preventing stolen equipment and materials than it is on protecting exposed data cables, for example, that could be directly tapped to monitor traffic or “listen in.” Physical security controls are often disabled or minimized for workers that frequently need to get in and out, leaving the door open for insider threats or external attackers to take advantage. Ensure you have the necessary monitoring and processes in place

to validate that gaps in your physical security are not giving way to potential cybersecurity incidents. The influx of cyberattacks is only predicted to increase and every business is in the crosshairs—even construction. But having a good security strategy in place (that incorporates the four aforementioned best practices), can help reduce your chances of being breached. Case and point: According to the KnowBe4 Phishing by Industry 2020 Benchmarking Report, 49.7% of midsize construction company employees fell for phishing attempts in 2019. Within 90 days of cybersecurity training, that figure fell to an impressive 17.7%. Best practices work. Now is the time to start building your new cyber security strategy. CCR

Corey Nachreiner is the CTO of WatchGuard Technologies. A front-line cybersecurity expert for nearly two decades, Nachreiner regularly contributes to security publications and speaks internationally at leading industry trade shows like RSA. He also is a Certified Information Systems Security Professional (CISSP). For more information, visit www.watchguard.com.

This article is from: