By Rebecca Harness, Chief Information Security Officer, Deltek
The past few months have underscored just how quickly the cybersecurity landscape is evolving. As new technologies reshape how architecture firms design and deliver projects, leaders are rethinking how they protect their teams, clients, and data — and doing so with the same creativity and problem-solving mindset that defines their work.
Across the industry, firms are taking proactive steps to strengthen digital confidence before issues occur. Many recognise that cybersecurity is now inseparable from business growth and can be a true differentiator for clients selecting partners for sensitive projects.
Our Clarity research found that 78% of architecture firms have invested more in cybersecurity over the past twelve months, while fewer than one in ten (8%) firms reported investing less. Although the economic environment has challenged firms, cutting cybersecurity investment can leave critical systems less prepared for emerging risks. A better approach is for organisations to continue evolving their security strategies through targeted, practical improvements that strengthen resilience without the need for expensive overhauls.
One area that deserves renewed focus is the set of systems that bind creative and operational work. In any modern practice, collaboration depends on digital precision, and project management platforms sit at the very centre of the architectural process. These connect dispersed teams, manage vast volumes of data, and serve as the digital framework in which ideas become built reality. With this centrality comes a greater responsibility to ensure these tools also fortify security.
Securing the digital foundations
For many project-based firms, the project management platform has become the most business-critical system they own, connecting creativity, operations, and client delivery. Yet this same centrality makes it one of the most overlooked elements of a firm’s cybersecurity strategy. Every file upload, design review, and approval thread moves valuable information across internal and external teams. As these platforms expand to integrate scheduling, financials, and resource management, they also offer a unique opportunity to embed smarter, more proactive security measures directly into the way projects are delivered. Treating these platforms as part of the firm’s cybersecurity architecture rather than just a productivity tool builds stronger control, transparency, and client confidence.
What steps do firms need to take to secure the digital foundations? At its core, cybersecurity is about preparation. First, strong access controls, vendor risk assessments, and secure data-sharing policies must be embedded into every stage of project governance. These measures protect more than data; they safeguard intellectual property, client confidence, and the trust that underpins long-term partnerships.
Increasing integration between firms, clients, and subcontractors has also changed security architecture. With so many interconnected systems, even minor missteps can create ripple effects, underscoring the importance of shared vigilance and clear accountability. For this reason, continuous monitoring, regular audits, and defined ownership of digital assets are now essential foundations of risk management — simple steps that reflect best practice.
Many architecture firms view project management platforms as more than operational necessities. When security is integrated by design, firms achieve greater visibility, accountability, and resilience. In turn, this creates a more confident, connected workforce that can innovate without compromise.
Designing resilience into collaboration
Technology alone cannot secure any workplace. The resilience of digital systems depends on the awareness and discipline of the people who use them. Architects, designers, and project managers each play a part in maintaining the integrity of shared data, ensuring that collaboration remains both efficient and secure.
Clear governance is central to this effort. Defined access hierarchies, approval workflows, and audit responsibilities create accountability and reduce the potential for oversight. Establishing these structures early enables firms to identify vulnerabilities before they become weaknesses, while ongoing training reinforces these principles, equipping staff to recognise risks and respond confidently when incidents occur.
Collaboration also requires consistent communication between teams and leadership. Transparent reporting channels encourage timely disclosure of potential issues, while post-project reviews provide valuable insight into how digital practices can be improved. Over time, this creates a feedback loop in which security performance evolves alongside project delivery.
In architectural terms, resilience in collaboration mirrors resilience in design. Both require foresight, precision, and continuous refinement. Through applying the same disciplines to digital operations that architects bring to their physical work, firms can integrate systems that are adaptable, trusted, and flexible for future challenges.
Building a future-ready industry
As the architecture sector continues its digital transformation, firms that treat cybersecurity as the bedrock of design principles will gain a long-lasting advantage. Resilient systems and well-trained teams underpin both creative freedom and operational stability. Strong governance and continual improvement form the blueprint for a more secure, agile, and future-ready profession built on trust and shared responsibility. A secure foundation is what allows the industry to keep building forward.
Are you a building professional? Sign up for a FREE MEMBERSHIP to upload news stories, post job vacancies, and connect with colleagues on our secure social feed.
