24th Aug 2022

Cyber security experts team up to help protect construction projects

We collaborated with industry peers and government to develop a best practice guide for Joint Ventures.

The new Information Security Best Practice guide aims to help construction companies keep sensitive data safe from attackers by offering tailored advice on how to securely handle the data they create, store and share in joint venture projects.

The guide is a unique collaboration between experts from industry and the National Cyber Security Centre (NCSC), the Department for Business, Energy and Industrial Strategy (BEIS) and the Centre for the Protection of National Infrastructure (CPNI).

It includes input from firms with experience in joint ventures, including major infrastructure contracts such as HS2 and Crossrail, where information security risks are particularly relevant due to their typically large size, value and complexity.

By following the recommended steps, businesses can improve their physical, personnel and cyber security, making themselves less attractive targets for malicious actors as threats, including ransomware, continue to pose a significant problem globally.

Sarah Lyons, NCSC Deputy Director for Economy and Society Resilience, said:

“Joint ventures in construction are responsible for some of the UK’s largest building projects and the data they handle must be protected to keep crucial infrastructure safe.  

“Failure to protect this information not only impacts individual businesses but can jeopardise national security, so it’s vital joint ventures secure their sites, systems and data.

“By following this new guidance, a first-of-its-kind collaboration between industry and government, construction firms can help put a holistic strategy in place to effectively manage their risks.”

The guidance is a collaboration between government and industry members of a NCSC-convened trust group, bringing together expertise, experience and input from dozens of companies in the sector.

Business Minister Lord Callanan said:

“Data and digital technology are key to making a more productive, competitive and sustainable construction industry. However, this new technology presents challenges that businesses must protect themselves and their stakeholders against.

“This new guidance, produced in partnership between industry and Government, will help construction firms keep their information safe, ensuring building projects are delivered on time and securely.”

The guide sets out why information security matters for joint ventures and offers a recommended approach to take to manage the risks, including:

  • Establishing information security governance and accountability within the joint venture and ensuring board-level engagement

  • Identifying staff to hold responsibility for assessing specific information security risks and developing a shared information security strategy

  • Understanding the specific risks and any regulatory requirements for the joint venture, and deciding on a shared risk appetite

  • Developing and agreeing on a shared information security strategy to manage and mitigate the risks holistically, including physical, personnel and cyber risks.

Globally, the construction industry continues to be one of the most targeted sectors by online attackers and businesses of all sizes are at risk.

 

Earlier this year, the NCSC published cyber security guidance with the Chartered Institute of Building aimed at helping small and medium-sized businesses improve their resilience.

Other NCSC resources aimed at helping organisations manage cyber security risks include the Board Toolkit, to facilitate essential conversations between board members and their technical experts, and the Exercise in a Box toolkit which helps organisations to test their incident response plans in a safe environment.

Latest news

  1. Maggie's Northampton topping out

    21 Feb 2025

    Sir Robert McAlpine Special Projects celebrates the topping out of Maggie’s Northampton, a new cancer support centre at Northampton General Hospital, marking a key milestone in providing expert care for those affected by cancer.

    Read more about
  2. Caroline Mulholland on good design in Healthcare

    12 Feb 2025

    As IHP is Lead Partner of the EHD Champions Awards, Caroline Mulholland reflects on the significance of design in healthcare, international best practice and lessons from the Awards.

    Read more about
  3. National Apprenticeship Week 2025 with Jack Chapman

    11 Feb 2025

    In support of National Apprenticeship week, we caught up with Trainee Quantity Surveyor Jack Chapman to hear about his experiences and progress on the path to a rewarding career.

    Read more about
View all news