Blog Archive – Page 11
October 9, 2025 – November 7, 2025 · page 11 of 12
CMMC 2.0 Levels Explained: Which One Applies to Your Company?
A plain-English guide to CMMC 2.0 for small contractors who handle federal work: levels, NIST SP 800-171, CUI, and the first steps to take now.
Managed IT for Contractors and Energy CompaniesManaged IT Fine Print: Red Flags in Contractor Service Agreements
A buyer's guide to managed IT agreements for construction and energy firms: scope, response times, security, jobsite support, and warning signs to avoid.
OT and Industrial Control System SecurityOT vs IT: Why Plant and Field Systems Need Different Security
Operational technology runs equipment, not email. Learn how OT differs from IT and the first practical security steps for energy and industrial operations.
Payment Diversion and Wire FraudHow a Vendor Payment Diversion Scam Unfolds, Step by Step
A walkthrough of a typical payment diversion attempt against a contractor, the warning signs at each stage, and the controls that stop it before money leaves.
Construction and Energy Software (Procore, Sage, Viewpoint)A 45-Minute Quarterly Procore Access Review for Contractors
Procore holds bids, drawings, and contracts. Here is how contractors can audit user roles, permission templates, and external access before something leaks.
Jobsite Connectivity and Field TechnologyJobsite Wi-Fi and Network Security: A Setup Checklist
A practical checklist for setting up a secure jobsite network: router settings, segmentation for cameras and guests, Wi-Fi coverage and end-of-project cleanup.
Construction CybersecuritySecurity Awareness Training for Crews Who Never Sit at a Desk
Field crews need security training too, but not a desktop video course. Here is how to build short, practical sessions that work in trucks and at toolbox talks.
OT and Industrial Control System SecurityIndustrial Control System Incident Response: A Tabletop Guide
How to run a tabletop exercise for an industrial incident, with a sample scenario, roles, discussion questions and follow-up items for operations and IT.
Payment Diversion and Wire FraudA Payment Verification Policy Template Outline for Contractors
An outline for a written payment verification policy: scope, roles, thresholds, call-back steps, exceptions, and what to do when a request looks wrong.
Construction and Energy Software (Procore, Sage, Viewpoint)Autodesk and BIM Collaboration: Protecting Models and Drawings
BIM models and shared drawings can reveal sensitive facility details. Learn how to control access, sharing and retention across Autodesk and similar platforms.
Jobsite Connectivity and Field TechnologyStarlink and LTE Failover for Remote Energy and Pipeline Sites
How to combine satellite and cellular links for remote sites, including router features, placement, power, security and a simple test plan before go-live.
Construction CybersecurityMyths vs Reality: What Contractors Get Wrong About Cyber Risk
Common beliefs such as we are too small or we have nothing to steal leave contractors exposed. Here is what is actually true and what to do about it.
Backup and Ransomware RecoveryTesting Your Backups: A Restore Drill for Busy Contractors
A backup you have never restored is only a guess. Here is a simple restore drill, with steps, roles and a checklist that busy contractors can run each quarter.
Compliance: CMMC, NERC CIP and Pipeline SecurityBuilding a System Security Plan for NIST SP 800-171
The system security plan is the core document for CUI protection. Learn what it contains, how to scope it, and how to write one that matches reality.
Construction and Energy Software (Procore, Sage, Viewpoint)Microsoft 365 Settings Contractors Often Miss
Microsoft 365 is the center of many contractors' operations, yet key security defaults are often untouched. Review these settings with your IT provider.
Jobsite Connectivity and Field TechnologyRugged Devices for the Field: Tablets, Phones and Laptops
How to choose and manage rugged tablets, phones and laptops for construction and energy crews, with notes on durability, security and lifecycle costs.
Construction CybersecurityCyber Insurance Questions Contractors Should Expect to Answer
Insurers now ask detailed security questions before quoting. Here is what contractors are commonly asked, why, and how to answer honestly and accurately.
Backup and Ransomware RecoveryRansomware Recovery Plan: The First 24 Hours at a Contractor
A step-by-step walkthrough of the first day after a ransomware attack, from isolating systems to calling insurance, and what to decide ahead of time.
Compliance: CMMC, NERC CIP and Pipeline SecurityTSA Pipeline Security Directives: A Primer for Operators
A general explainer of TSA cybersecurity directives for pipeline operators, the themes they cover, and what service providers should expect to support.
Managed IT for Contractors and Energy CompaniesIT Budgeting for a Contractor: Where the Money Should Go
A practical way to plan an annual technology budget for a construction or energy company, with the main categories, planning tips and cost traps to avoid.
OT and Industrial Control System SecuritySecuring Remote Vendor Access to Industrial Equipment
Equipment vendors need remote access to support your systems, and attackers know it. Here is how to give vendors access without a standing open door.
Construction CybersecurityPhishing Lures That Target Construction Staff and How to Spot Them
Fake bid invites, plan-room links, e-signature requests and delivery notices fool busy staff. Learn the common lures and the habits that stop them.
Backup and Ransomware RecoveryBackup Rules for Ransomware: The 3-2-1-1 Approach Explained
Ransomware attackers go after backups first. Learn the 3-2-1-1 rule, what immutable means, and how to build backups a contractor can really restore from.
Compliance: CMMC, NERC CIP and Pipeline SecurityNERC CIP Concepts for Small Utilities and Contractors
A general explainer on NERC CIP standards: who they apply to, the main topic areas, and what they can mean for the contractors who work around utilities.
Managed IT for Contractors and Energy CompaniesOnboarding and Offboarding: The IT Checklist Field Crews Need
Seasonal hiring and crew turnover make access control hard. Use this onboarding and offboarding checklist to keep accounts, devices and data under control.
OT and Industrial Control System SecuritySegmenting OT From IT: A Plain-English Guide for Operators
Network segmentation is the most useful early step in industrial security. Learn what zones mean and how to plan segmentation without stopping operations.
Payment Diversion and Wire FraudSpotting a Fake Vendor Banking Change Before You Pay It
A walkthrough of what a fraudulent banking change request looks like, how to verify it, and a simple written procedure your accounts payable team can use.
Construction and Energy Software (Procore, Sage, Viewpoint)Sage 300 CRE and Viewpoint Vista: A Security Checklist
Construction ERP systems hold payroll, job cost and banking data. A practical checklist for securing Sage and Viewpoint accounting environments.
Compliance: CMMC, NERC CIP and Pipeline SecurityCMMC 2.0 for Subcontractors: What Flows Down to You
If your contractor holds defense work, CMMC requirements may reach you as a subcontractor. Here is what flows down, what CUI means, and how to prepare.
Managed IT for Contractors and Energy CompaniesWhat Managed IT Should Include for a Growing Contractor
A buyer's guide to managed IT services for contractors and energy firms: what belongs in scope, what to ask vendors, and the warning signs to watch for.