Blog Archive – Page 9
December 8, 2025 – January 6, 2026 · page 9 of 12
What to Look for in a Managed IT Contract for a Contractor
A buyer's guide to managed IT agreements for construction and energy firms: scope, response times, security duties, exit terms and the red flags to avoid.
OT and Industrial Control System SecurityBuilding an OT Asset Inventory When You Have No Budget
You cannot protect industrial equipment you do not know you have. Here is a practical way to build an OT asset inventory using walkdowns and simple tools.
Payment Diversion and Wire FraudVerifying Vendor Bank Changes Before You Send a Dime
A simple callback procedure can stop payment diversion fraud. Learn how to verify vendor bank account changes in a contractor's accounts payable process.
Construction and Energy Software (Procore, Sage, Viewpoint)How to Clean Up Procore User Permissions Without Chaos
Procore permission sprawl is a quiet security and cost problem. Here is a step-by-step way to audit user access, tighten roles and keep projects running.
Compliance: CMMC, NERC CIP and Pipeline SecurityCMMC Readiness Checklist for Defense Subcontractors
A practical first-quarter checklist for contractors who touch federal contract information or CUI and need to get ready for CMMC 2.0 requirements in contracts.
Managed IT for Contractors and Energy CompaniesSetting IT Goals for a New Year: A Planning Guide for Contractors
Turn a vague wish for better IT into a short list of measurable goals covering reliability, security, field support and budget for your company.
OT and Industrial Control System SecurityOT Security Review: Setting Priorities for the Coming Year
A year-end framework for operators and contractors to review OT security, pick the highest-value improvements and build a realistic, funded plan.
Payment Diversion and Wire FraudLien Waivers, Pay Apps and Fraud: Where Attackers Slip Into Billing
Construction billing paperwork is predictable enough for fraudsters to imitate. See where pay apps and lien waivers create openings and how to close them.
Construction and Energy Software (Procore, Sage, Viewpoint)Budgeting for Construction Software Licenses, Support and Add-Ons
Software costs go beyond the license. Learn how to budget for seats, add-ons, support, integrations, training and security in your construction tech stack.
Jobsite Connectivity and Field TechnologyWi-Fi for Laydown Yards and Large Sites: Coverage Planning Basics
Large yards and sprawling sites defeat ordinary Wi-Fi. Learn how to plan coverage with outdoor access points, point-to-point links and mesh options.
Construction CybersecurityRugged Tablets and Phones in the Field: Security Basics That Work
Field devices get dropped, lost and left in trucks. Learn the management, encryption and policy basics that protect company data on tablets and phones.
OT and Industrial Control System SecurityPatching Industrial Systems: A Risk-Based Approach to Uptime
Patching OT is not the same as patching laptops. Learn how to prioritize, test and schedule updates while protecting uptime, safety and vendor support.
Payment Diversion and Wire FraudHoliday Weeks and Payment Fraud: Why Attackers Favor Thin Offices
Fraudsters time urgent payment requests for holidays, when approvers are away. Learn how to cover approvals, verification and bank alerts during time off.
Construction and Energy Software (Procore, Sage, Viewpoint)Vetting Connected Apps in Your Construction Software Stack
Every integration between your project, accounting and payroll tools creates a new access path. Learn how to review apps, permissions and API keys safely.
Jobsite Connectivity and Field TechnologyJobsite Trailer Network Setup: A Practical Checklist
A step-by-step checklist for setting up a secure, reliable network in a jobsite trailer, from power and internet to Wi-Fi, cameras and printers.
Construction CybersecurityA Year-End Security Checklist for Contractors
Year-end is a natural time to tidy accounts, test backups, review vendors and update response plans. Use this checklist before the new budget cycle begins.
Backup and Ransomware RecoveryBacking Up Microsoft 365 and Cloud Project Data: What Is Your Job
Cloud providers keep platforms running, but protecting your files and mail from deletion or attack is your job. Here is what to back up and how to test it.
Compliance: CMMC, NERC CIP and Pipeline SecurityPreparing Subcontractors for CMMC Flow-Down Requirements
Your subs may need to meet CMMC requirements too. Learn how flow-down works and how to prepare your supply chain without losing bidders or time.
Construction and Energy Software (Procore, Sage, Viewpoint)Hardening Accounting Software: A Checklist for Sage and Viewpoint
Accounting and ERP systems hold payroll, vendor and job cost data. This checklist covers access, payment controls, backups and updates for Sage and Viewpoint.
Jobsite Connectivity and Field TechnologyChoosing Between LTE, 5G and Starlink for a Remote Jobsite
A buyer's guide to comparing cellular and satellite internet for remote jobsites, covering coverage, latency, cost, power and failover planning.
Construction CybersecurityMyth vs Reality: Why Contractors Are Not Too Small to Be Targeted
Five common myths keep small and mid-sized contractors from acting on cybersecurity. Here is what is actually true and what practical steps follow.
Backup and Ransomware RecoveryA Ransomware Recovery Walkthrough: The First 72 Hours
A hypothetical timeline of the first three days after a ransomware attack on a contractor, showing the decisions, steps and mistakes that shape the recovery.
Compliance: CMMC, NERC CIP and Pipeline SecurityTSA Pipeline Security Directives: What Vendors Need to Know
A general overview of TSA security directives for pipeline operators and how they affect the vendors, contractors and service providers who work with them.
Managed IT for Contractors and Energy CompaniesHelp Desk Support for Crews That Start Before the Office Opens
Field crews do not work office hours. See how to design help desk coverage, escalation and self-service so a dead tablet at dawn does not stall a whole crew.
OT and Industrial Control System SecurityBuilding an OT Asset Inventory Without Shutting Anything Down
You cannot protect industrial equipment you do not know about. Learn how to build an OT asset inventory safely, using walkdowns, records and passive monitoring.
Construction CybersecurityTen Cybersecurity Habits Every Project Manager Should Build
Project managers handle bids, pay apps, drawings and vendor email all day. These ten habits cut the risk of fraud, account takeover and data loss on every job.
Backup and Ransomware RecoveryBackup Rules for Contractors: Copies, Media, Offsite and Immutable
The 3-2-1 backup rule, extended with immutability and testing, adapted for contractors with servers, jobsite laptops and cloud project data.
Compliance: CMMC, NERC CIP and Pipeline SecurityNERC CIP in Plain English for Small Utilities and Their Contractors
What NERC CIP standards are, who they apply to, and what contractors and small utilities should understand when working near bulk electric system assets.
Managed IT for Contractors and Energy CompaniesOnboarding and Offboarding Field Crews Without Leaving Security Gaps
Seasonal crews and fast hiring make access control hard. This checklist for onboarding and offboarding field staff covers accounts, devices and project systems.
OT and Industrial Control System SecurityRemote Access to Plant Controls: Safer Options Than a Shared VPN
Vendors and operators need remote access to controls, but a shared VPN login is risky. Compare safer approaches that keep technicians connected and sites safe.