Cybersecurity

Architecture, engineering and construction firms are attractive targets for a simple reason: they move large payments, share files with many outside parties, and rarely have security staff of their own. The articles in this category cover the threats these firms actually face, from fake invoices and spoofed supplier emails to ransomware that encrypts active project files. They also cover what cyber insurers now ask for at renewal, including multi-factor authentication, endpoint protection and tested backups, and how to put those controls in place without slowing down project work. Everything here is written for principals, office managers and project leads at New York City firms, not for security specialists.