New guidance aimed at SMEs 

The UK’s cyber security chiefs have published security guidance aimed at the construction industry.

The new Cyber Security for Construction Businesses guide from the National Cyber Security Centre (NCSC), which is part of GCHQ, gives advice for the industry on how to protect their businesses and building projects.

The guidance, launched with the Chartered Institute of Building (CIOB), is aimed at small and medium-sized firms with these businesses relying more on digital tools and ways of working, such as using 3D modelling packages, GPS equipment and business management software.

shutterstock_438568516

Source: Shutterstock

Firms including Arup, Zaha Hadid and Bouygues have all been attacked by cyber criminals

Sarah Lyons, NCSC deputy director for economy and society engagement, said: “As construction firms adopt more digital ways of working, it’s vital to put protective measures in place to stay safe online – in the same way you’d wear a hard hat on site.”

Caroline Gumble, chief executive of the CIOB, said it was important construction firms learned not to underestimate the consequences of poor cyber security.

>> Free webinar: Introduction to Smart Buildings and cyber security: New Guidance and Best Practices on the security of Smart Built Environments: IoTSF

>> Free webinar: Cybersecurity in construction

She added: “They can have a devastating impact on financial margins, the construction programme, business reputation, supply chain relationships, the built asset itself and, worst of all, people’s health and wellbeing. As such, managing data and digital communications channels is more important than ever.”

Construction businesses of all sizes continue to be targets for cyber attackers due to the sensitive data they hold and high-value payments they handle, with firms including Bouygues, Bam, Tilbury Douglas when it was known as Interserve, Zaha Hadid and Arup all falling prey to attack in recent years.

The new guidance is split into two parts: the first aimed at helping business owners and managers understand why cyber security matters and the second aimed at advising staff responsible for IT equipment and services within construction companies on actions to take.

Topics