Sector guide
Cyber Essentials for construction and trades businesses
Demand for Cyber Essentials in construction is increasingly coming from further up the supply chain: main contractors, housing associations, and public-sector clients building it into their own supplier requirements, even for subcontractors and trades businesses that don't think of themselves as an IT-heavy target.
Scoping tends to look different here than in an office-based business. Site staff often use personal phones or tablets for timesheets, photos, and shared drives, subcontractors bring their own devices onto shared projects, and IT support is frequently small, outsourced, or handled informally by whoever's best with computers. None of that is a problem in itself, but it does mean nobody may have looked at whether the setup would actually meet a formal standard.
Site staff often use personal phones or tablets for timesheets and photos, and subcontractors bring their own devices onto shared projects.
That's exactly what a first check is for: finding out where a typically lean setup actually stands, rather than assuming it's fine because nothing's gone wrong yet.
Worth knowing
Run the free 5-minute readiness check to see where you stand before a client or tender asks.