Skip to content

Industries

Construction & Contractors

Your office is wherever the job is this month, and your biggest technology risk is not a laptop — it is a fraudulent invoice.

What makes this different

The problems specific to your sector

Not a generic list. These are the things that come up repeatedly in this kind of business.

  • Job sites have no infrastructure

    Trailers need connectivity now, at a location that will not exist in six months. Cellular and temporary WiFi have to be planned, not improvised.

  • You move large payments on email instruction

    Progress payments and change orders make construction a prime target for business email compromise. The attacker does not need to breach you — spoofing you is enough.

  • Devices live hard lives

    Tablets and phones get dropped, soaked and stolen. Every one of them holds email and drawings.

  • Plans and drawings are enormous

    Sharing large files between office, site and architects breaks down when the answer is email attachments.

Compliance

What you are actually required to do

Named obligations rather than the word 'compliance'. If one of these does not apply to you, we will say so.

  • Payment fraud controls

    Out-of-band verification for any change of bank details, and DMARC so your domain cannot be forged.

  • Contract security terms

    Larger general contractors increasingly impose security requirements down the chain.

Your software

We expect to find these

We work around your line-of-business software rather than asking you to change it, and we deal with the vendor when needed.

  • Procore
  • Buildertrend
  • Sage 300 CRE
  • PlanGrid / Autodesk Build
  • QuickBooks
  • Bluebeam

Questions

Common questions

Can you get internet to a job trailer?

Yes — usually cellular with a business-grade router, and a directional link to the main site where the distance allows. It is designed per site rather than assumed.

Someone tried to change our supplier's bank details by email. How do we stop that?

Make verbal verification on a known number a rule for every change without exception, and lock down your own domain with SPF, DKIM and DMARC so your name cannot be used against your customers.

What happens when a site tablet is stolen?

With device management in place it is wiped remotely and the accounts on it are revoked. Without it, whoever has the tablet has your email.

Ready to secure your business?

A free assessment: we review your network, backups, Microsoft 365 settings and exposure, then hand you the findings in writing — whether or not you hire us.