Cybersecurity tops UK architects' priorities over AI

Cybersecurity has become the top priority for UK architecture, engineering and consulting firms, according to Deltek, with 30% ranking it above artificial intelligence.

The finding comes as 70% of UK project-based firms reported being targeted by a cyber-attack in the past three years.

Research in Deltek's 2026 Clarity Report suggests cyber risk is no longer just an issue for technology teams, but a broader commercial concern for professional services businesses. The survey found 64% of UK firms are extremely or very concerned about cybersecurity risks in 2026.

Among companies affected by an attack, half reported financial losses. Firms that had experienced a cyber-attack were also more likely to make cybersecurity a priority than those that had not, by 29% to 17%.

Improving cybersecurity was the leading priority for 30% of UK firms, ahead of operationalising and optimising AI at 29% and investing in or implementing new technologies at 25%.

Attack patterns

The most commonly reported incidents were customer or client data breaches and ransomware or malware affecting internal systems, both cited by 28% of respondents. Intellectual property data breaches followed at 27%, while fraud or theft, such as invoice scams, stood at 23%.

Ransomware or malware affecting external customer or client services was reported by 20% of firms. Across all markets covered by the research, 31% of organisations affected by a successful attack said they had suffered reputational damage among clients, customers and industry peers.

The figures point to a broader shift in how firms assess digital risk as they connect more systems and use AI more widely in day-to-day operations. For businesses that depend on project delivery, any interruption can affect revenue, client relationships and project timelines.

That commercial impact is reflected in Deltek's view that cyber resilience is becoming part of board-level decision-making. The report links the rise in concern to the growing use of connected tools and the concentration of project, resource and finance data across business systems.

A separate measure in the survey underlined the scale of concern. Nearly two-thirds of respondents said they were either extremely or very concerned about cybersecurity risks, suggesting the unease extends well beyond firms that have already faced a successful breach.

Business response

Becca Harness, Chief Information Security Officer at Deltek, said: "This Cybersecurity Awareness Month, the theme 'Don't make it easy for them' is timely. A single vulnerable entry point can be enough for cybercriminals to gain access, so cybersecurity has rightly become a board-level business issue rather than simply an IT concern.

"It's very encouraging to see businesses taking the threat seriously and actively improving their cyber resilience. This, in turn, has direct positive implications for client trust, revenue continuity and margin protection. As we continue to see exciting progression in digital transformation, acting now to keep up with new cyber threats will place businesses in a strong position to continue to grow and flourish with technology, rather than view it as a vulnerability."

The data suggests recent attacks are shaping priorities more directly than broader technology trends. While AI remains close behind cybersecurity in management attention, the ranking indicates many firms now see cyber defence as the more urgent operational issue.

For architecture, engineering and consulting businesses, the concern is tied to the nature of their work. These firms often hold sensitive client information, intellectual property, project schedules and financial records, leaving them exposed not only to direct theft but also to disruption that can delay delivery and increase costs.

Invoice scams and fraud also featured prominently in the findings, showing that not all threats involve headline-grabbing ransomware incidents. Financial deception, data theft and service disruption each carry different risks, but all can affect margins and client trust.

The results suggest cyber resilience is increasingly being treated as a core business objective. The fact that half of attacked firms reported financial losses is likely to reinforce that shift within management teams and boards.

Deltek said 30,000 organisations use its software across sectors including government contracting, aerospace and defence, architecture and engineering, construction and consulting.