Building a cyber secured construction sector

By Aidan Collins

Cyber Security Apprentice

Latest guidance from the National Cyber Security Centre (NCSC), in partnership with the Chartered Institute of Building (CIOB),  highlights common cyber security threats to the construction sector.

Due to the increasing modernisation of the once analogue construction industry, particularly small to medium sized construction companies are being targeted with sometimes dire consequences due to a lack of investment in cyber security.

Construction companies of all sizes are urged by the CIOB to improve the security of their data by creating a security conscious environment through regular training.

The aim is to teach employees that, whilst on a construction site the importance of wearing a hard hat may be self-explanatory, clicking on suspicious email attachments may not be so obvious, but should carry the same weight.

As construction businesses frequently liaise with large supply chains, cyber criminals are increasingly using a form of attack known as ‘Spear Phishing’.

In this scenario the attacker may send an email, posing as a legitimate company, to trick the business into sending money to a fraudulent account, or to divulge further information that could help an attacker compromise a system.

Simple attacks such as this can seriously undermine the trust & relationship between a business and its supply chain with not only capital at risk, but employee and client personal data.

A data breach can leave an organisation with an open investigation into security negligence and potential heavy fines from the ICO (Information Commissioner’s Office).

Further information can be found on the NCSC’s website: https://www.ncsc.gov.uk/guidance/cyber-security-for-construction-businesses

Indelible Data’s Managing Director, Tony Wilson, recently spoke on this subject to the Nuclear Supply Chain at Britain’s Energy Coast Business Cluster. If your company requires guidance on how to improve Cyber Security, please contact us at info@indelibledata.co.uk