Two senior operators working on a big interactive map in a system monitoring room

Cybersecurity in the Age of AI: What A&E Firms Need to Know

As artificial intelligence (AI) continues to reshape industries, architecture and engineering (A&E) firms are increasingly integrating AI into their workflows, from generative design and project planning to predictive maintenance and client engagement. While the benefits are compelling, this digital transformation introduces new cybersecurity challenges that firms must proactively address.

At Deltek, we understand the unique needs of A&E firms and the importance of balancing innovation with security. October marks Cybersecurity Awareness Month, a timely reminder of the critical role proactive safeguards play in protecting firms from evolving digital threats. Here's a closer look at the pros and cons of AI adoption through the lens of cybersecurity.

The Promise of AI for A&E Firms

AI offers many benefits that can significantly improve the operation of A&E firms. By automating repetitive tasks and streamlining workflows, AI enables teams to work more efficiently and focus on higher-value activities. For example, generative design tools can produce multiple design iterations in a fraction of the time it would take manually. At the same time, predictive analytics can help firms anticipate project delays or budget overruns before they occur.

Beyond operational efficiency, AI also enhances decision-making. Machine learning algorithms can analyze vast amounts of data to uncover patterns and insights that inform better project planning and execution. For example, Dela™ leverages purposeful innovation to enhance productivity, accuracy and value across the project lifecycle. By harnessing the power of AI, Dela unlocks transformative benefits for powering project success.

Cybersecurity Risks in an AI-Driven Environment

According to the latest Deltek North America Clarity A&E Industry Study, cybersecurity remains a top concern for firms. Nearly one in three firms (28%) identified it as their top challenge, and 22% reported experiencing a cyber threat or attack, up from 19% last year. Meanwhile, UK firms are equally concerned about cybersecurity, with over a third of firms experiencing a cyber attack in the previous 18 months, as highlighted in the Deltek UK Clarity Industry Study. Therefore, it's unsurprising that the percentage of firms in the UK that view cybersecurity as very important has increased from 48% in 2024 to 58% this year, with 79% of firms planning to increase their investment in cybersecurity measures. The data underscores the need for stronger threat detection, secure system architecture and employee awareness training.

While AI offers powerful opportunities for Architecture & Engineering (A&E) firms, it also introduces new risks that can compromise security and trust. Understanding these vulnerabilities is essential to striking the right balance between innovation and protection. Below are the key risks firms should keep in mind when integrating AI into their workflows:

  1. Data Security Risks

    AI systems rely on vast amounts of information, including proprietary designs, client records, and operational data. If not properly secured, this sensitive information becomes a prime target for cyberattacks.

  2. Model Manipulation

    AI algorithms can be vulnerable to adversarial attacks, where malicious actors input misleading data to distort results. Such manipulation can compromise system integrity and have serious consequences in contexts where accuracy is critical, such as design and planning.

  3. Third-Party and Cloud Vulnerabilities

    Many AI tools depend on external vendors or cloud-based platforms. Without thorough vetting, these integrations can open the door to security gaps that attackers may exploit.

  4. Reduced Human Oversight

    Increased automation can decrease direct human monitoring. This creates blind spots where anomalies or malicious activities might go unnoticed, heightening operational risk.

Best Practices for AI Adoption

To mitigate these risks, A&E firms should adopt a proactive approach to cybersecurity as they implement AI. Establishing strong data governance policies is essential. Firms should define clear protocols for data collection, storage, and access, ensuring that sensitive information is encrypted and only accessible to authorized personnel.

Vendor due diligence is also critical. Before integrating any AI solution, firms should evaluate the provider's cybersecurity posture and confirm compliance with industry standards and regulations. Continuous monitoring of AI models is another key strategy. By regularly reviewing outputs and using explainable AI tools, firms can detect signs of manipulation or performance drift.

Employee training plays a vital role in maintaining cybersecurity. Staff should be educated on the risks associated with AI and trained in best practices for data handling and system oversight. “AI is a force multiplier, but only when people are trained to use it thoughtfully. Quick answers aren’t enough. You need to understand the why behind the response,” said Becca Harness, VP and CISO at Deltek.

Finally, firms should develop a comprehensive incident response plan that includes scenarios specific to AI-related breaches or failures.

Support for Secure Innovation

Deltek is committed to helping A&E firms innovate with confidence. Our solutions are designed with cybersecurity at the core, offering secure cloud infrastructure, compliance with industry regulations, and integrated data protection tools. We also provide expert guidance to support firms through their digital transformation journey.

“One of Deltek’s differentiators is how deeply our product and security teams collaborate. We’re not just reacting—we’re planning 12, 18, even 36 months ahead to meet evolving compliance demands.”

– Becca Harness, VP and CISO, Deltek

Whether you're just beginning to explore AI or looking to scale its use across your organization, Deltek offers the tools and insights needed to move forward securely.

AI is more than a trend, it's a strategic asset for A&E firms seeking to stay competitive in a rapidly evolving industry. But with its adoption comes a responsibility to safeguard data, systems, and client trust. By understanding the risks and implementing best practices, firms can unlock AI's full potential while maintaining a strong cybersecurity posture.

AI & Trust

Prioritizing AI & Trust

Learn the responsible AI principles guiding Deltek's products, from fairness and transparency to human dignity and data protection.

Contributors

Author

deltek company logo

Deltek

Deltek experts and industry thought leaders share their views on the latest trends, technology and issues shaping project-based businesses today.

Featured Thoughts

city under construction

Article

Find What Needs Attention: Smarter Specification Insights in Specpoint

Spec Intelligence brings intelligent specification analysis to Specpoint, helping A&E professionals identify potential issues earlier and streamline specification review. Readers will learn how Insights surfaces relationships, omissions and inconsistencies that may require attention.

workers at a solar power station

Article

Reimagining Specification Development: The Untapped Potential of Connected Spec Data

Connected specification data creates new opportunities beyond information management. This article explores how intelligence can help A&E professionals identify relationships, dependencies, and potential issues that may otherwise be difficult to detect.

Team collaboration meeting at office

Article

Why Finance Is the Performance Engine for Professional Services Firms, Not Just the Scorekeeper

This article examines how finance leaders at architecture, engineering (A&E), and consulting firms are taking on AI governance, real-time performance visibility, and forward-looking cost control.

worker looking at computer monitor

Article

Why 78% of AE Firms Use AI But Only 38% See Results

Generative AI adoption is widespread across AE firms, but measurable results remain limited. This article explains why some firms convert AI investment into business impact and outlines practical steps to build AI fluency and scale value.

Article

Earned Value Management 101: Why It's the KPI Most Firms Get Wrong

This article explains how to track Earned Value Management (EVM), the project KPI that provides project leaders with the earliest warning of cost and schedule problems in professional services engagements.