Cyber Readiness Pro
Back to insights

Sector guide

Cyber Essentials for construction and trades businesses

Demand for Cyber Essentials in construction is increasingly coming from further up the supply chain: main contractors, housing associations, and public-sector clients building it into their own supplier requirements, even for subcontractors and trades businesses that don't think of themselves as an IT-heavy target.

Scoping tends to look different here than in an office-based business. Site staff often use personal phones or tablets for timesheets, photos, and shared drives, subcontractors bring their own devices onto shared projects, and IT support is frequently small, outsourced, or handled informally by whoever's best with computers. None of that is a problem in itself, but it does mean nobody may have looked at whether the setup would actually meet a formal standard.

Site staff often use personal phones or tablets for timesheets and photos, and subcontractors bring their own devices onto shared projects.

That's exactly what a first check is for: finding out where a typically lean setup actually stands, rather than assuming it's fine because nothing's gone wrong yet.

Worth knowing

A lean, informally-run setup isn't a problem in itself. The risk is nobody having checked whether it would actually meet a formal standard.

Run the free 5-minute readiness check to see where you stand before a client or tender asks.