# Cybersecurity Vulnerabilities in Off-Site Construction
## 4 Targetable Entities and Vulnerabilities
### Primary Production
#### 4.1.1 Prefabricated Module Production and Preparation  
After the tender stage, the manufacturer and the onsite contractor communicate to deliberate the overall work plan. During this process, manufacturing drawings are prepared based on the initial design drawings, and these need to be approved by the onsite contractor before production is initiated. After approval of the production schedule, the production manager procures the necessary materials to produce prefabricated modules following the master plan and the project development [39]. An onsite agent of the factory traditionally facilitates communication between the factory and the site via email or fax to confirm custom orders.  
Such traditional media has resulted in information loss and ineffective communication [35]. However, with digital technologies, such as multi-dimensional IoT building information modelling (MITBIMP) and radio frequency identification (RFID) devices, real-time information, such as the status of precast components can be effectively communicated [35]. This data sharing can also be enabled using smart construction objects (SCO) attached with auto-ID devices that are remotely located and gather information from remotely located value-adding points. Smart construction objects are enhanced by detecting, administering, computing, and responding.  
The resulting autonomy and interaction with off-site work enable better decision-making [40]. A material list is prepared according to the work plan and ordered. Inspection samples are prepared and tested. A MITBIMP generates traceable data that gives information on the present and past statuses (see Figure 4). The cloud-hosted traceable data are based on the part history, which describes the previous location, handling, and processing history. Such a system overcomes the traditional problems of physical paper records that do not give real-time information and efficient information sharing without using emails or calls.  
Further integration has been enabled on MITBIMP systems by incorporating data source interoperability (DSIS) for smooth integration. This has been successfully implemented in Hong Kong, where an application information service (AIS) acts as a mediator information system that can present heterogeneous information to stakeholders without human involvement. This service heavily relies on software, IoT, AI, and cloud services and is managed by an AIS Universal Description, Discovery, and Integration registry  
Figure 4: Visibility tools for MITBIMP. Reprinted/Adapted with permission from Reference [35]. Copyright 2017 Copyright Elsevier B.V.  
(AIS--UDDI), facilitating cooperation amongst agents. With so much information being generated and requested, an SOA--based Data Access Services performs an information standardization sequence using a structured query language (SQL). This takes place under the following steps,  
1. Retrieve data information model (DIM).
2. Target data source search.
3. Filter data.  
Overall, the AIS agent retrieves the requested information and presents a data model representation [35].