Blog Archive – Page 10
November 8, 2025 – December 7, 2025 · page 10 of 12
Vendor Bank Change Requests: A Verification Procedure That Works
Fake bank change requests are a leading route for payment diversion. Use this step-by-step callback procedure to protect vendor and subcontractor payments.
Construction and Energy Software (Procore, Sage, Viewpoint)Procore Permissions Cleanup: Who Really Needs Admin Access
A practical review of roles, permission templates and stale accounts in Procore and similar project platforms so access matches the work people do.
Compliance: CMMC, NERC CIP and Pipeline SecurityCMMC Level 2 Scoping: Which Systems Actually Count for Your Contract
Scoping decides how big your CMMC effort is. Learn how CUI, asset categories and enclaves determine what a defense subcontractor must secure.
Managed IT for Contractors and Energy CompaniesWhat a Managed IT Agreement Should Cover for a Growing Contractor
A buyer's guide to the scope, response times, security duties and exit terms a managed IT agreement should spell out for a growing contractor or energy firm.
OT and Industrial Control System SecuritySeven Questions to Ask Before Connecting Equipment to the Network
Before a pump skid, compressor or generator joins your network, ask these seven questions to avoid creating a path from the internet to a physical process.
Payment Diversion and Wire FraudFake Lien Waivers and Pay App Scams: Red Flags for Project Accounting
Fraudsters exploit pay applications, lien waivers, and change orders to redirect money. Learn the red flags and controls for project accounting teams.
Construction and Energy Software (Procore, Sage, Viewpoint)A Year-End Access and Backup Review for Your Construction Software
Use December to review who can access Procore, Sage, and Viewpoint, confirm backups restore, and close the year with cleaner permissions and fewer risks.
Jobsite Connectivity and Field TechnologyJobsite Cameras and Drones: Data, Privacy, and Security Basics
Cameras and drones capture valuable project records, but they also create security and privacy exposure. Here is how to manage footage, access, and devices.
Construction CybersecuritySeven Cybersecurity Myths Contractors Believe, and What Is True
We are too small, we have nothing worth stealing, our software handles it: seven common myths among contractors, and what is really true behind each one.
OT and Industrial Control System SecurityRunning an OT Incident Tabletop: A Script for Plant and IT Teams
A step-by-step tabletop exercise script for a ransomware scenario that touches plant operations, with roles, injects, and questions to test your plan.
Payment Diversion and Wire FraudHoliday Week Fraud: Why Scammers Strike When Finance Is Short-Staffed
Holidays create approval gaps. Here is how contractors can keep payment verification firm when the usual finance people are out of the office.
Construction and Energy Software (Procore, Sage, Viewpoint)Retiring Old Construction Software Without Losing Data or Control
Sunsetting an old estimating, accounting, or project tool? Plan archiving, access removal, and data retention so legacy systems do not become security holes.
Jobsite Connectivity and Field TechnologyRugged Tablets and Field Devices: A Buyer's Guide for Superintendents
What to look for when buying tablets, laptops, and phones for jobsites: durability, battery life, connectivity, management, and security features that matter.
Construction CybersecurityCyber Insurance Applications: What Contractors Are Asked and Why
Insurers now ask detailed security questions. Learn what underwriters look for, how to answer honestly, and which controls improve coverage options.
Backup and Ransomware RecoveryBackup Policy Basics: RPO, RTO, and Retention in Plain Terms
Learn how recovery point, recovery time, and retention translate into a backup policy that fits what your contracting or energy business can tolerate.
Compliance: CMMC, NERC CIP and Pipeline SecurityTSA Pipeline Security Directives: What Smaller Operators Should Know
A general explainer on TSA security directives for pipeline operators, who is affected, and the foundational cyber practices that help owners and contractors.
Construction and Energy Software (Procore, Sage, Viewpoint)Choosing Construction Software Integrations Without Opening Gaps
Connecting Procore, accounting, and other tools saves time but creates new access paths. Learn how to vet integrations, tokens, and third-party apps.
Jobsite Connectivity and Field TechnologyA Secure Jobsite Network Setup Checklist for Trailers and Yards
Set up jobsite internet safely: router settings, separate Wi-Fi networks, camera controls, and closeout steps so trailer networks do not become liabilities.
Construction CybersecuritySecuring Laptops and Phones That Live in Trucks and Trailers
Field devices get dropped, stolen, and shared. Practical controls for encryption, lock screens, tracking, and remote wipe for construction and energy crews.
Backup and Ransomware RecoveryBacking Up Microsoft 365: What Microsoft Covers and What You Own
Microsoft keeps its service running, but your data is your responsibility. Learn the shared responsibility model and how to protect email and files.
Compliance: CMMC, NERC CIP and Pipeline SecurityNERC CIP in Plain English for Small Utilities and Co-ops
A general overview of what NERC CIP standards cover, who they apply to, and practical groundwork that helps small utilities and their contractors prepare.
Managed IT for Contractors and Energy CompaniesOnboarding and Offboarding Checklist for Crews and Seasonal Hires
Construction hiring is fast and turnover is high. Use this IT checklist to give new hires access quickly and shut it off the day they leave.
OT and Industrial Control System SecurityTen Questions to Ask Your Equipment Vendor About Cybersecurity
Before you buy or renew industrial equipment, ask the vendor these ten security questions about remote access, patching, passwords, and support.
Construction CybersecurityPhishing in the Trades: Fake Bid Invites and Plan Room Links
Attackers disguise phishing as bid invitations, plan room links, and lien waivers. Learn the patterns estimators and project managers should recognize.
Backup and Ransomware RecoveryThe Ransomware Recovery Timeline: From Hour One to Day Seven
A hypothetical walkthrough of ransomware recovery at a contractor, showing what to do in each phase and which backup decisions determine how fast you return.
Compliance: CMMC, NERC CIP and Pipeline SecurityPreparing for a CMMC Level 2 Assessment: A Practical Timeline
A phased plan for small contractors getting ready for CMMC Level 2: scoping, gap assessment, remediation, documentation, and what assessors look for.
Managed IT for Contractors and Energy CompaniesQ&A: Common Questions Contractors Ask About Managed IT
Straight answers to the questions owners ask most about outsourcing IT: cost, control, jobsites, security, and how a switch actually works in practice.
OT and Industrial Control System SecuritySecuring Remote Access to SCADA and Control Systems
Vendors and engineers need remote access to control equipment, but it is a top entry point for attackers. Here is how to set it up and manage it safely.
Payment Diversion and Wire FraudPayment Diversion Policy: A Template Outline for Finance Teams
Use this outline to write a short, enforceable policy for vendor banking changes, payment approvals, and wire requests that protects contractors from fraud.
Construction and Energy Software (Procore, Sage, Viewpoint)Least Privilege in Your Job Cost System: Roles, Duties, Reviews
Your accounting system holds payroll, job costs, and vendor banking details. Here is how to lock down Sage and Viewpoint access without slowing the office.