## 4 Verification and Validation
### Implementation of the Proposed Model in a Construction Example
#### 4.2.1 Overview of the Hypothetical Scenarios
These characteristics related to the malicious insider are summarized in Table 5.  
Table 6 (for Scenario 1) and Table 7 (for Scenario 2) show the two different files requested by the malicious insider, the criticality of each file for the project considering different cybersecurity attributes, the corresponding \(\omega\) values, the value of each file to the malicious insider, the corresponding \(\beta\) values, the accessibility levels of each file, the project security level, file security levels, malicious insider's expertise level, the cost of \begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Project Type** & **Smart Hospital Building** & \\
**Project Phase** & **Construction Phase** & \\ \hline
**Scenarios** & **Characteristic** & **Value** \\ \hline Scenario 1 & The overall security level of the project & High (0.7) (See Table 3) \\ \hline  & The probability that the malicious insider who launches a cyberattack is detected (\(\text{p}_{2}\)) & 0.7 \\ \hline  & The probability that the malicious insider who uses authentication is detected (\(\text{p}_{1}\)) & 0.8 \\ \hline Scenario 2 & The overall security level of the project & Medium (0.5) (See Table 3) \\ \hline  & The probability that the malicious insider who launches a cyberattack is detected (\(\text{p}_{2}\)) & 0.49 \\ \hline  & The probability that the malicious insider who uses authentication is detected (\(\text{p}_{1}\)) & 0.55 \\ \hline \hline \end{tabular}
\end{table} 
Table 4: Characteristics related to the projects for scenarios 1 and 2. \begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt}} \hline \hline
**Characteristic** & **Value** \\ \hline Type of malicious insider & Career criminal \\ \hline The motivation of the malicious insider & Financial gain \\ \hline Insider’s expertise level & Advanced beginner (0.3) (See Figure 3) \\ \hline The initial probability of being a malicious insider (\(\delta_{\text{initial}}\) ) & 0.2 \\ \hline The probability of being a malicious insider at the time of the access request (\(\delta_{\text{current}}\) ) & 0.8 \\ \hline \hline \end{tabular}
\end{table} 
Table 5: Characteristics of the malicious insider. cyberattack \(\left(C_{cyb}\right)\), and the Bayesian Nash Equilibrium (BNE) that shows the best strategy for the insider and the defender. The criticality levels of each file were determined based on the CIA triad [46] (i.e., confidentiality, integrity, and availability). The details of each file requested by the malicious insider and their importance from the project's and insider's perspectives were as follows:  
* The cost and schedule forecast file shows the details of the contractor's cost calculations for various tasks, the internal schedule for the remaining work, the profitability analysis of the contractor, and the risk register of the project. The file is \"critical\" in terms of confidentiality since it includes the financial details of the project, such as the cost of various tasks, the profitability of the project, and the cost of materials and services. Since this information is only available to a few people in the project, the accessibility level of the file is \"very low\" (Table 6). The file's integrity has a \"medium\" criticality since the data alterations might mislead the project management and cause wrong decisions to be made. However, it is not as critical as the confidentiality aspect. Lastly, the availability of the file has low criticality since its unavailability does not disrupt the business functions or site operations. Since the malicious insider has a financial motivation, the file is of \"critical\" value. He/she can potentially sell the sensitive content of the file to competitors or ask for a ransom in exchange for not leaking the data. Therefore, the insider primarily targets this file. * The structural design file includes all the details regarding the structural elements, such as the reinforcement details, concrete and other structural material characteristics, and the connection details of each element.