<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://ironfieldcyber.com/blog/</loc><lastmod>2026-10-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/archive/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/2/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/3/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/4/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/5/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/6/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/7/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/8/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/9/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/10/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/11/</loc></url><url><loc>https://ironfieldcyber.com/blog/archive/page/12/</loc></url><url><loc>https://ironfieldcyber.com/blog/project-closeout-checklist-for-data-accounts-and-access/</loc><lastmod>2026-10-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/buying-control-equipment-security-requirements-for-your-rfps/</loc><lastmod>2026-10-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/callback-verification-for-vendor-payments-doing-it-right/</loc><lastmod>2026-10-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vetting-construction-software-vendors-security-questions-to-ask/</loc><lastmod>2026-09-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/jobsite-internet-downtime-plan-keeping-crews-working-offline/</loc><lastmod>2026-09-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/a-fall-cybersecurity-checklist-for-contractors-before-year-end/</loc><lastmod>2026-09-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/which-systems-to-restore-first-after-a-ransomware-attack/</loc><lastmod>2026-09-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/one-control-set-many-audiences-cmmc-insurance-customer-asks/</loc><lastmod>2026-09-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mobile-construction-apps-permissions-offline-data-lost-phones/</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/power-planning-for-jobsite-networks-generators-ups-surges/</loc><lastmod>2026-09-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/joint-ventures-and-teaming-sharing-project-data-without-sharing-risk/</loc><lastmod>2026-09-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/a-ransomware-response-contact-sheet-who-does-what-and-who-to-call/</loc><lastmod>2026-09-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/scoping-a-cui-enclave-keeping-cmmc-costs-under-control/</loc><lastmod>2026-09-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/quarterly-business-reviews-with-your-it-provider-what-to-ask/</loc><lastmod>2026-09-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cellular-modems-and-wireless-links-in-remote-control-systems/</loc><lastmod>2026-09-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/bid-season-security-protecting-estimates-pricing-and-bid-files/</loc><lastmod>2026-09-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backing-up-jobsite-data-field-laptops-cameras-and-drone-footage/</loc><lastmod>2026-09-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/compliance-evidence-what-assessors-and-auditors-ask-to-see/</loc><lastmod>2026-09-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/device-lifecycle-planning-tracking-laptops-phones-and-tablets/</loc><lastmod>2026-09-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/protecting-historians-and-engineering-workstations-in-ot-networks/</loc><lastmod>2026-09-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/teaching-accounts-payable-to-pause-call-back-habits-that-stick/</loc><lastmod>2026-09-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/single-sign-on-for-construction-software-benefits-and-setup-steps/</loc><lastmod>2026-09-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cmmc-phase-in-for-subcontractors-what-the-dfars-rule-changed/</loc><lastmod>2026-09-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/judging-a-managed-it-provider-by-response-times-and-real-support/</loc><lastmod>2026-09-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/usb-drives-and-laptops-in-control-rooms-rules-operators-can-follow/</loc><lastmod>2026-09-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/hidden-inbox-rules-how-fraudsters-hide-in-a-hijacked-mailbox/</loc><lastmod>2026-09-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/moving-estimating-and-bid-data-to-a-new-platform-mistakes-to-avoid/</loc><lastmod>2026-09-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/jobsite-internet-troubleshooting-a-field-guide-for-superintendents/</loc><lastmod>2026-09-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mistakes-to-avoid-when-giving-subs-access-to-your-systems/</loc><lastmod>2026-09-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/logging-and-alerts-for-small-ot-environments-where-to-start/</loc><lastmod>2026-09-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vendor-onboarding-controls-that-stop-fake-payees-before-day-one/</loc><lastmod>2026-09-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/month-end-close-and-software-access-controls-for-controllers/</loc><lastmod>2026-09-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/how-much-internet-does-a-jobsite-need-a-bandwidth-planning-guide/</loc><lastmod>2026-09-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/who-owns-cybersecurity-in-a-subcontract-clauses-to-read-closely/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backup-admin-accounts-how-ransomware-deletes-your-recovery/</loc><lastmod>2026-08-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vendor-and-cloud-due-diligence-for-cmmc-and-cui-handling/</loc><lastmod>2026-08-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mobile-app-permissions-in-construction-software-a-field-review/</loc><lastmod>2026-08-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/keeping-remote-trailers-online-power-antennas-and-failover/</loc><lastmod>2026-08-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/subcontractor-cyber-requirements-writing-them-into-your-contracts/</loc><lastmod>2026-08-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/recovering-job-cost-and-accounting-data-after-a-ransomware-attack/</loc><lastmod>2026-08-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/multifactor-authentication-and-encryption-under-nist-800-171/</loc><lastmod>2026-08-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/standardizing-laptops-and-images-for-a-growing-contractor/</loc><lastmod>2026-08-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/physical-and-cyber-security-at-remote-field-sites-one-plan/</loc><lastmod>2026-08-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/protecting-estimating-and-bid-data-before-bid-day/</loc><lastmod>2026-08-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backup-retention-and-legal-holds-for-construction-records/</loc><lastmod>2026-08-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cyber-incident-reporting-duties-for-defense-contractors-and-operators/</loc><lastmod>2026-08-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/managing-your-managed-it-provider-a-quarterly-review-guide/</loc><lastmod>2026-08-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/choosing-an-ot-monitoring-approach-for-a-small-operator/</loc><lastmod>2026-08-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/callback-verification-done-right-scripts-and-phone-number-hygiene/</loc><lastmod>2026-08-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/rolling-out-sso-across-procore-autodesk-and-accounting-tools/</loc><lastmod>2026-08-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/gathering-evidence-for-nist-800-171-what-to-keep-and-how/</loc><lastmod>2026-08-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/help-desk-metrics-contractors-should-actually-track/</loc><lastmod>2026-08-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/running-safe-remote-maintenance-windows-for-control-systems/</loc><lastmod>2026-08-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/dual-approval-for-ach-and-wire-payments-setting-it-up-properly/</loc><lastmod>2026-08-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/document-control-in-construction-software-naming-access-retention/</loc><lastmod>2026-08-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/managing-hotspots-sims-and-data-plans-across-many-jobsites/</loc><lastmod>2026-08-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/business-email-compromise-at-a-contractor-early-warning-signs/</loc><lastmod>2026-08-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/alarm-and-logging-basics-for-small-industrial-control-environments/</loc><lastmod>2026-08-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vendor-onboarding-controls-that-stop-fake-vendors-before-payment/</loc><lastmod>2026-08-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/planning-a-sage-or-viewpoint-upgrade-without-surprises/</loc><lastmod>2026-08-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/jobsite-connectivity-site-survey-what-to-check-before-mobilizing/</loc><lastmod>2026-08-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/who-owns-what-assigning-cybersecurity-roles-in-a-contractor/</loc><lastmod>2026-08-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backup-mistakes-that-only-surface-during-a-ransomware-recovery/</loc><lastmod>2026-08-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cmmc-scoping-deciding-which-systems-actually-hold-cui/</loc><lastmod>2026-08-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/procore-project-closeout-archive-data-and-remove-access/</loc><lastmod>2026-07-31</lastmod></url><url><loc>https://ironfieldcyber.com/blog/offline-first-field-work-planning-for-dead-zones-and-outages/</loc><lastmod>2026-07-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/security-for-the-ten-person-trade-contractor-priorities-in-order/</loc><lastmod>2026-07-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/disaster-recovery-for-contractors-beyond-backing-up-files/</loc><lastmod>2026-07-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/scoping-your-cui-environment-enclaves-versus-company-wide/</loc><lastmod>2026-07-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/hardware-lifecycle-planning-when-to-replace-laptops-and-servers/</loc><lastmod>2026-07-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/safety-systems-and-cybersecurity-where-the-two-meet-in-operations/</loc><lastmod>2026-07-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/equipment-rental-and-telematics-hidden-cyber-exposure/</loc><lastmod>2026-07-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/protecting-backups-from-attackers-credentials-and-access/</loc><lastmod>2026-07-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/preparing-employees-for-cmmc-training-and-role-responsibilities/</loc><lastmod>2026-07-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/measuring-your-managed-it-provider-metrics-that-matter/</loc><lastmod>2026-07-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/logging-and-monitoring-for-small-ot-environments/</loc><lastmod>2026-07-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/executive-impersonation-texts-and-urgent-wire-or-gift-card-requests/</loc><lastmod>2026-07-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mobile-apps-for-field-reporting-security-and-adoption-tips/</loc><lastmod>2026-07-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/documenting-compliance-evidence-a-folder-structure-that-works/</loc><lastmod>2026-07-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/your-new-it-providers-first-60-days-phase-by-phase/</loc><lastmod>2026-07-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/default-passwords-and-vendor-accounts-in-control-systems/</loc><lastmod>2026-07-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/double-check-systems-for-payroll-redirect-and-direct-deposit-fraud/</loc><lastmod>2026-07-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/data-ownership-when-you-leave-a-construction-software-vendor/</loc><lastmod>2026-07-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/job-trailer-wi-fi-guest-access-visitors-inspectors-and-owners/</loc><lastmod>2026-07-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/subcontractor-cyber-requirements-what-to-put-in-your-contracts/</loc><lastmod>2026-07-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/remote-monitoring-devices-in-the-field-securing-small-ot-gear/</loc><lastmod>2026-07-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vendor-onboarding-controls-that-stop-fake-supplier-accounts/</loc><lastmod>2026-07-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/before-you-switch-to-sso-questions-for-construction-software-vendors/</loc><lastmod>2026-07-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/power-heat-and-dust-keeping-network-gear-alive-in-the-field/</loc><lastmod>2026-07-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-estimating-and-bid-data-before-it-walks-out-the-door/</loc><lastmod>2026-07-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backup-monitoring-catching-silent-failures-before-you-need-them/</loc><lastmod>2026-07-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mid-year-compliance-check-cmmc-nerc-cip-and-tsa-gaps-to-close/</loc><lastmod>2026-07-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/month-end-close-security-protecting-your-job-cost-workflow/</loc><lastmod>2026-07-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cellular-router-settings-that-keep-jobsite-connections-stable/</loc><lastmod>2026-07-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ten-minutes-a-week-a-cyber-routine-for-contractor-owners/</loc><lastmod>2026-07-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/project-record-retention-backups-archives-and-legal-holds/</loc><lastmod>2026-06-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mid-year-compliance-review-a-checklist-for-contractors-and-operators/</loc><lastmod>2026-06-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/help-desk-metrics-owners-should-actually-watch/</loc><lastmod>2026-06-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vendor-laptops-and-usb-drives-in-control-rooms-a-practical-policy/</loc><lastmod>2026-06-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/storm-season-continuity-keeping-it-running-through-severe-weather/</loc><lastmod>2026-06-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backing-up-field-data-photos-drone-footage-and-daily-logs/</loc><lastmod>2026-06-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/building-a-compliance-evidence-folder-that-assessors-can-follow/</loc><lastmod>2026-06-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/asset-management-for-contractors-tracking-laptops-tablets-routers/</loc><lastmod>2026-06-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/wireless-risks-at-industrial-sites-radios-wi-fi-and-bluetooth/</loc><lastmod>2026-06-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/fraud-controls-for-subcontractor-onboarding-and-vendor-setup/</loc><lastmod>2026-06-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mobile-timekeeping-apps-payroll-accuracy-and-employee-data-security/</loc><lastmod>2026-06-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/scoping-cmmc-drawing-a-boundary-around-your-cui/</loc><lastmod>2026-06-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/managed-it-onboarding-what-the-first-60-days-should-look-like/</loc><lastmod>2026-06-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/protecting-controller-configurations-and-project-files-in-ot-backups/</loc><lastmod>2026-06-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/payroll-and-direct-deposit-scams-bec-beyond-wire-fraud/</loc><lastmod>2026-06-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/single-sign-on-for-construction-apps-benefits-and-pitfalls/</loc><lastmod>2026-06-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/offline-first-field-apps-keeping-crews-productive-when-signal-drops/</loc><lastmod>2026-06-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/who-owns-cybersecurity-at-a-contractor-roles-that-actually-work/</loc><lastmod>2026-06-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/logging-and-monitoring-for-ot-what-to-collect-first/</loc><lastmod>2026-06-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/check-fraud-and-ach-changes-accounts-payable-controls-that-hold/</loc><lastmod>2026-06-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/a-security-questionnaire-for-construction-software-vendors/</loc><lastmod>2026-06-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/getting-reliable-cell-signal-on-a-jobsite-placement-and-power/</loc><lastmod>2026-06-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/text-message-scams-aimed-at-foremen-and-field-staff/</loc><lastmod>2026-06-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/seven-backup-gaps-that-fail-at-restore-time-and-how-to-fix-them/</loc><lastmod>2026-06-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/fci-vs-cui-sorting-your-contract-data-before-cmmc-applies/</loc><lastmod>2026-06-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/owning-your-records-data-export-strategy-for-cloud-construction-apps/</loc><lastmod>2026-06-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/budgeting-for-jobsite-internet-cost-planning-across-projects/</loc><lastmod>2026-06-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/closing-out-a-project-retiring-access-and-data-when-a-job-ends/</loc><lastmod>2026-06-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ransomware-recovery-order-of-operations-what-to-restore-first/</loc><lastmod>2026-06-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/what-to-look-for-in-cmmc-contract-language-before-you-sign/</loc><lastmod>2026-06-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/shadow-it-in-the-field-finding-the-apps-your-crews-use/</loc><lastmod>2026-05-31</lastmod></url><url><loc>https://ironfieldcyber.com/blog/change-management-for-control-systems-a-safe-simple-process/</loc><lastmod>2026-05-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vetting-subcontractor-cyber-risk-before-you-share-plans/</loc><lastmod>2026-05-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/a-one-page-disaster-recovery-runbook-for-a-contractor/</loc><lastmod>2026-05-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/using-nist-csf-2-0-as-a-practical-framework-for-small-operators/</loc><lastmod>2026-05-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/hardware-lifecycle-planning-when-to-replace-laptops-and-routers/</loc><lastmod>2026-05-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vendor-laptops-and-hmis-keeping-plant-systems-clean/</loc><lastmod>2026-05-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/payroll-diversion-and-direct-deposit-change-scams-in-construction/</loc><lastmod>2026-05-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/getting-field-teams-to-use-new-software-a-rollout-playbook/</loc><lastmod>2026-05-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/reading-far-and-dfars-cyber-clauses-a-guide-for-non-lawyers/</loc><lastmod>2026-05-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/co-managed-it-when-your-one-it-person-needs-a-partner/</loc><lastmod>2026-05-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/logging-and-monitoring-for-ot-what-to-collect-and-what-to-skip/</loc><lastmod>2026-05-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/check-fraud-and-ach-controls-for-contractors-bank-tools-that-help/</loc><lastmod>2026-05-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cloud-or-on-premises-construction-accounting-a-decision-guide/</loc><lastmod>2026-05-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-jobsite-cameras-protect-the-system-that-watches-you/</loc><lastmod>2026-05-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/protecting-payroll-i-9-and-certified-payroll-records/</loc><lastmod>2026-05-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cellular-gateways-and-remote-monitors-the-forgotten-ot-risk/</loc><lastmod>2026-05-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/red-flags-accounts-payable-clerks-should-never-ignore/</loc><lastmod>2026-05-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/project-closeout-in-procore-archive-data-and-remove-access/</loc><lastmod>2026-05-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/managing-hotspots-and-data-plans-across-a-field-fleet/</loc><lastmod>2026-05-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mfa-fatigue-attacks-how-they-work-and-how-to-stop-them/</loc><lastmod>2026-05-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/seven-backup-gaps-contractors-usually-find-too-late/</loc><lastmod>2026-05-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/defense-contractors-and-cyber-incident-reporting-prepare-now/</loc><lastmod>2026-05-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/planning-a-construction-accounting-upgrade-questions-to-settle-first/</loc><lastmod>2026-05-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/planning-jobsite-bandwidth-cameras-drawings-and-crews/</loc><lastmod>2026-05-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/protecting-bids-and-estimates-before-they-go-out-the-door/</loc><lastmod>2026-05-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backing-up-drone-data-site-photos-and-large-project-files/</loc><lastmod>2026-05-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/scoring-your-own-nist-800-171-gaps-honestly-before-an-assessor-does/</loc><lastmod>2026-05-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/how-to-measure-your-it-provider-metrics-that-actually-matter/</loc><lastmod>2026-05-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/safety-systems-and-cybersecurity-questions-operators-should-ask/</loc><lastmod>2026-05-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/pre-construction-security-kickoff-a-checklist-for-new-projects/</loc><lastmod>2026-05-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/disaster-recovery-for-contractors-business-continuity-beyond-backups/</loc><lastmod>2026-04-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cyber-incident-reporting-duties-who-you-may-need-to-tell-and-when/</loc><lastmod>2026-04-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/standardizing-hardware-why-fleet-consistency-cuts-support-costs/</loc><lastmod>2026-04-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/safety-and-security-together-where-ot-cyber-meets-field-safety/</loc><lastmod>2026-04-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/fake-invoices-from-compromised-subcontractors-a-q-a/</loc><lastmod>2026-04-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mobile-apps-in-construction-software-securing-field-access/</loc><lastmod>2026-04-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cmmc-evidence-what-assessors-look-at-and-how-to-organize-it/</loc><lastmod>2026-04-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/reading-a-monthly-managed-it-report-what-owners-should-look-for/</loc><lastmod>2026-04-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/logging-and-monitoring-in-ot-what-small-operators-can-do/</loc><lastmod>2026-04-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/payroll-diversion-and-direct-deposit-scams-in-construction/</loc><lastmod>2026-04-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/spreadsheet-exports-keeping-job-cost-data-from-leaking-via-excel/</loc><lastmod>2026-04-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/planning-jobsite-connectivity-in-the-bid-costs-and-lead-times/</loc><lastmod>2026-04-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/multi-factor-authentication-choices-which-methods-hold-up-best/</loc><lastmod>2026-04-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ot-change-management-keeping-controller-updates-safe-and-logged/</loc><lastmod>2026-04-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vendor-onboarding-controls-that-stop-fake-suppliers/</loc><lastmod>2026-04-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/choosing-construction-erp-security-questions-to-ask-every-vendor/</loc><lastmod>2026-04-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/jobsite-cameras-and-iot-sensors-connect-them-without-exposure/</loc><lastmod>2026-04-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/password-managers-for-contractors-rollout-without-the-resistance/</loc><lastmod>2026-04-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backing-up-jobsite-laptops-and-field-data-that-never-touch-the-office/</loc><lastmod>2026-04-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/nerc-cip-and-tsa-directives-which-rules-apply-to-which-company/</loc><lastmod>2026-04-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/procore-project-closeout-archiving-documents-without-losing-control/</loc><lastmod>2026-04-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cellular-router-basics-antennas-carriers-and-placement-for-sites/</loc><lastmod>2026-04-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/email-security-basics-spf-dkim-and-dmarc-for-contractors/</loc><lastmod>2026-04-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backup-mistakes-that-only-show-up-during-a-ransomware-event/</loc><lastmod>2026-04-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cmmc-scoping-drawing-the-boundary-around-your-cui/</loc><lastmod>2026-04-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/your-first-30-days-with-a-new-managed-it-provider/</loc><lastmod>2026-04-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/reading-your-plant-network-diagram-what-ot-operators-should-check/</loc><lastmod>2026-04-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/protecting-bid-data-estimating-files-competitors-would-love-to-see/</loc><lastmod>2026-04-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ransomware-recovery-order-of-operations-what-comes-back-first/</loc><lastmod>2026-04-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mapping-nist-csf-2-0-to-a-contractor-s-security-program/</loc><lastmod>2026-04-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/quarterly-business-reviews-with-your-it-provider-an-agenda/</loc><lastmod>2026-03-31</lastmod></url><url><loc>https://ironfieldcyber.com/blog/safety-systems-and-cybersecurity-where-the-two-teams-overlap/</loc><lastmod>2026-03-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/fake-invoices-from-compromised-suppliers-what-to-check/</loc><lastmod>2026-03-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/sage-and-viewpoint-reports-gone-rogue-controlling-exports/</loc><lastmod>2026-03-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/preparing-for-a-cmmc-assessment-evidence-folders-that-work/</loc><lastmod>2026-03-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/hardware-lifecycle-planning-for-contractors-laptops-to-switches/</loc><lastmod>2026-03-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/logging-and-monitoring-for-small-control-system-environments/</loc><lastmod>2026-03-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/payment-fraud-drill-a-30-minute-tabletop-for-finance-teams/</loc><lastmod>2026-03-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/procore-integrations-audit-who-has-api-access-to-your-data/</loc><lastmod>2026-03-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/wi-fi-dead-zones-on-large-sites-planning-coverage-without-guessing/</loc><lastmod>2026-03-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/personal-phones-on-the-jobsite-a-fair-byod-policy/</loc><lastmod>2026-03-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/safe-ways-to-scan-an-industrial-network-without-tripping-it/</loc><lastmod>2026-03-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/email-rules-that-catch-payment-fraud-before-finance-sees-it/</loc><lastmod>2026-03-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/viewpoint-vista-upgrades-planning-for-minimal-downtime/</loc><lastmod>2026-03-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/power-mounting-and-placement-getting-starlink-to-work-in-the-field/</loc><lastmod>2026-03-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/subcontractor-cyber-requirements-in-your-contracts-a-guide/</loc><lastmod>2026-03-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/disaster-recovery-for-a-contractor-with-one-office-and-many-sites/</loc><lastmod>2026-03-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vendor-risk-questions-for-utilities-and-their-contractors/</loc><lastmod>2026-03-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/moving-construction-accounting-to-the-cloud-security-questions/</loc><lastmod>2026-03-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/keeping-cameras-gates-and-sensors-online-on-remote-sites/</loc><lastmod>2026-03-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mfa-fatigue-and-prompt-bombing-how-to-stop-approval-abuse/</loc><lastmod>2026-03-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/protecting-backups-from-attackers-who-hunt-for-them/</loc><lastmod>2026-03-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/security-policies-you-need-before-a-cmmc-assessment/</loc><lastmod>2026-03-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/help-desk-metrics-a-contractor-owner-should-actually-watch/</loc><lastmod>2026-03-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/remote-monitoring-gear-on-wellsites-a-security-walkthrough/</loc><lastmod>2026-03-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-bid-day-protecting-estimates-and-pricing-data/</loc><lastmod>2026-03-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backup-retention-mistakes-that-surface-only-after-an-attack/</loc><lastmod>2026-03-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/scoping-cmmc-which-systems-actually-fall-under-assessment/</loc><lastmod>2026-03-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/how-to-read-a-managed-it-proposal-line-by-line/</loc><lastmod>2026-03-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-engineering-workstations-laptops-ot-environments/</loc><lastmod>2026-03-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/email-rules-account-controls-block-invoice-fraud/</loc><lastmod>2026-03-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vetting-construction-software-vendors-for-security/</loc><lastmod>2026-02-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/preparing-for-cmmc-assessment-evidence-to-gather/</loc><lastmod>2026-02-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ten-questions-to-ask-before-hiring-managed-it-provider/</loc><lastmod>2026-02-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/incident-response-playbook-outline-operations-teams/</loc><lastmod>2026-02-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/payment-controls-policy-outline-subs-suppliers/</loc><lastmod>2026-02-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/planning-safe-sage-viewpoint-upgrade-migration/</loc><lastmod>2026-02-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-jobsite-cameras-sensors-iot-devices/</loc><lastmod>2026-02-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/security-training-for-field-crews-that-actually-gets-done/</loc><lastmod>2026-02-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/monitoring-ot-networks-what-to-watch-without-an-engineer/</loc><lastmod>2026-02-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/five-payment-fraud-myths-that-cost-contractors-money/</loc><lastmod>2026-02-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/connecting-accounting-project-software-without-new-risks/</loc><lastmod>2026-02-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/starlink-on-the-jobsite-setup-limits-security/</loc><lastmod>2026-02-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/mobile-device-rules-rugged-tablets-field-phones/</loc><lastmod>2026-02-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backing-up-procore-sage-cloud-data-you-do-not-hold/</loc><lastmod>2026-02-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/controlled-unclassified-information-what-contractors-protect/</loc><lastmod>2026-02-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/autodesk-construction-cloud-access-control-shared-projects/</loc><lastmod>2026-02-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/secure-jobsite-trailer-network-step-by-step/</loc><lastmod>2026-02-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/protecting-plans-project-files-across-many-partners/</loc><lastmod>2026-02-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/what-decides-how-long-ransomware-keeps-you-down/</loc><lastmod>2026-02-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/tsa-pipeline-security-directives-what-operators-should-know/</loc><lastmod>2026-02-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/budgeting-for-it-mid-size-contractor-without-guessing/</loc><lastmod>2026-02-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/patching-industrial-systems-when-you-cannot-reboot/</loc><lastmod>2026-02-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/phishing-lures-aimed-at-estimators-project-managers/</loc><lastmod>2026-02-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/test-your-backups-restore-drill-contractors/</loc><lastmod>2026-02-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/nerc-cip-plain-english-small-utilities-vendors/</loc><lastmod>2026-02-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/onboarding-offboarding-field-crews-security-gaps/</loc><lastmod>2026-02-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-vendor-remote-access-field-plant-equipment/</loc><lastmod>2026-02-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/wire-fraud-response-first-hour-after-bad-payment/</loc><lastmod>2026-02-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/switching-project-management-software-a-cutover-checklist/</loc><lastmod>2026-01-31</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cui-flow-down-for-subcontractors-what-primes-will-ask/</loc><lastmod>2026-01-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/budgeting-for-field-support-help-desk-models-for-contractors/</loc><lastmod>2026-01-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/an-ot-security-policy-outline-for-small-operators/</loc><lastmod>2026-01-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/wire-fraud-response-playbook-what-to-do-in-the-first-hour/</loc><lastmod>2026-01-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/managing-third-party-apps-and-integrations-in-construction-software/</loc><lastmod>2026-01-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-the-jobsite-trailer-network-a-practical-setup-guide/</loc><lastmod>2026-01-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/preparing-your-cyber-insurance-application-without-surprises/</loc><lastmod>2026-01-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/air-gap-myth-vs-reality-segmenting-it-and-ot-in-practice/</loc><lastmod>2026-01-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/pay-app-and-lien-waiver-fraud-questions-contractors-ask/</loc><lastmod>2026-01-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/organizing-microsoft-365-and-sharepoint-for-project-documents/</loc><lastmod>2026-01-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/choosing-rugged-tablets-and-phones-for-field-crews/</loc><lastmod>2026-01-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/phishing-training-your-foremen-will-actually-remember-q-a/</loc><lastmod>2026-01-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ransomware-hits-a-contractor-a-hypothetical-first-24-hours/</loc><lastmod>2026-01-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/nerc-cip-for-small-utilities-five-common-misunderstandings/</loc><lastmod>2026-01-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-your-construction-accounting-system-sage-and-viewpoint/</loc><lastmod>2026-01-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/starlink-lte-or-5g-choosing-jobsite-internet-that-works/</loc><lastmod>2026-01-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/rolling-out-mfa-to-field-crews-without-revolting-the-foremen/</loc><lastmod>2026-01-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/how-to-run-a-backup-restore-test-that-actually-proves-something/</loc><lastmod>2026-01-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/tsa-pipeline-security-directives-in-plain-english/</loc><lastmod>2026-01-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/onboarding-and-offboarding-checklist-for-seasonal-crews/</loc><lastmod>2026-01-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-vendor-remote-access-to-industrial-equipment/</loc><lastmod>2026-01-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/why-shared-logins-on-jobsites-are-a-security-and-liability-problem/</loc><lastmod>2026-01-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/immutable-backups-explained-for-contractors-and-energy-firms/</loc><lastmod>2026-01-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/nist-800-171-explained-ssps-poa-ms-and-what-assessors-want/</loc><lastmod>2026-01-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/what-to-look-for-in-a-managed-it-contract-for-a-contractor/</loc><lastmod>2026-01-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/building-an-ot-asset-inventory-when-you-have-no-budget/</loc><lastmod>2026-01-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/verifying-vendor-bank-changes-before-you-send-a-dime/</loc><lastmod>2026-01-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/how-to-clean-up-procore-user-permissions-without-chaos/</loc><lastmod>2026-01-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cmmc-readiness-checklist-for-defense-subcontractors/</loc><lastmod>2026-01-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/setting-it-goals-for-a-new-year-a-planning-guide-for-contractors/</loc><lastmod>2026-01-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ot-security-review-setting-priorities-for-the-coming-year/</loc><lastmod>2025-12-31</lastmod></url><url><loc>https://ironfieldcyber.com/blog/lien-waivers-pay-apps-and-fraud-where-attackers-slip-into-billing/</loc><lastmod>2025-12-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/budgeting-for-construction-software-licenses-support-and-add-ons/</loc><lastmod>2025-12-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/wi-fi-for-laydown-yards-and-large-sites-coverage-planning-basics/</loc><lastmod>2025-12-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/rugged-tablets-and-phones-in-the-field-security-basics-that-work/</loc><lastmod>2025-12-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/patching-industrial-systems-a-risk-based-approach-to-uptime/</loc><lastmod>2025-12-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/holiday-weeks-and-payment-fraud-why-attackers-favor-thin-offices/</loc><lastmod>2025-12-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vetting-connected-apps-in-your-construction-software-stack/</loc><lastmod>2025-12-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/jobsite-trailer-network-setup-a-practical-checklist/</loc><lastmod>2025-12-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/a-year-end-security-checklist-for-contractors/</loc><lastmod>2025-12-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backing-up-microsoft-365-and-cloud-project-data-what-is-your-job/</loc><lastmod>2025-12-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/preparing-subcontractors-for-cmmc-flow-down-requirements/</loc><lastmod>2025-12-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/hardening-accounting-software-a-checklist-for-sage-and-viewpoint/</loc><lastmod>2025-12-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/choosing-between-lte-5g-and-starlink-for-a-remote-jobsite/</loc><lastmod>2025-12-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/myth-vs-reality-why-contractors-are-not-too-small-to-be-targeted/</loc><lastmod>2025-12-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/a-ransomware-recovery-walkthrough-the-first-72-hours/</loc><lastmod>2025-12-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/tsa-pipeline-security-directives-what-vendors-need-to-know/</loc><lastmod>2025-12-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/help-desk-support-for-crews-that-start-before-the-office-opens/</loc><lastmod>2025-12-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/building-an-ot-asset-inventory-without-shutting-anything-down/</loc><lastmod>2025-12-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ten-cybersecurity-habits-every-project-manager-should-build/</loc><lastmod>2025-12-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backup-rules-for-contractors-copies-media-offsite-and-immutable/</loc><lastmod>2025-12-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/nerc-cip-in-plain-english-for-small-utilities-and-their-contractors/</loc><lastmod>2025-12-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/onboarding-and-offboarding-field-crews-without-leaving-security-gaps/</loc><lastmod>2025-12-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/remote-access-to-plant-controls-safer-options-than-a-shared-vpn/</loc><lastmod>2025-12-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/vendor-bank-change-requests-a-verification-procedure-that-works/</loc><lastmod>2025-12-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/procore-permissions-cleanup-who-really-needs-admin-access/</loc><lastmod>2025-12-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cmmc-level-2-scoping-which-systems-actually-count-for-your-contract/</loc><lastmod>2025-12-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/what-a-managed-it-agreement-should-cover-for-a-growing-contractor/</loc><lastmod>2025-12-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/seven-questions-to-ask-before-connecting-equipment-to-the-network/</loc><lastmod>2025-12-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/fake-lien-waivers-and-pay-app-scams-red-flags-for-project-accounting/</loc><lastmod>2025-12-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/a-year-end-access-and-backup-review-for-your-construction-software/</loc><lastmod>2025-12-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/jobsite-cameras-and-drones-data-privacy-and-security-basics/</loc><lastmod>2025-11-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/seven-cybersecurity-myths-contractors-believe-and-what-is-true/</loc><lastmod>2025-11-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/running-an-ot-incident-tabletop-a-script-for-plant-and-it-teams/</loc><lastmod>2025-11-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/holiday-week-fraud-why-scammers-strike-when-finance-is-short-staffed/</loc><lastmod>2025-11-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/retiring-old-construction-software-without-losing-data-or-control/</loc><lastmod>2025-11-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/rugged-tablets-and-field-devices-a-buyer-s-guide-for-superintendents/</loc><lastmod>2025-11-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cyber-insurance-applications-what-contractors-are-asked-and-why/</loc><lastmod>2025-11-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backup-policy-basics-rpo-rto-and-retention-in-plain-terms/</loc><lastmod>2025-11-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/tsa-pipeline-security-directives-what-smaller-operators-should-know/</loc><lastmod>2025-11-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/choosing-construction-software-integrations-without-opening-gaps/</loc><lastmod>2025-11-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/a-secure-jobsite-network-setup-checklist-for-trailers-and-yards/</loc><lastmod>2025-11-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-laptops-and-phones-that-live-in-trucks-and-trailers/</loc><lastmod>2025-11-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backing-up-microsoft-365-what-microsoft-covers-and-what-you-own/</loc><lastmod>2025-11-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/nerc-cip-in-plain-english-for-small-utilities-and-co-ops/</loc><lastmod>2025-11-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/onboarding-and-offboarding-checklist-for-crews-and-seasonal-hires/</loc><lastmod>2025-11-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ten-questions-to-ask-your-equipment-vendor-about-cybersecurity/</loc><lastmod>2025-11-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/phishing-in-the-trades-fake-bid-invites-and-plan-room-links/</loc><lastmod>2025-11-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/the-ransomware-recovery-timeline-from-hour-one-to-day-seven/</loc><lastmod>2025-11-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/preparing-for-a-cmmc-level-2-assessment-a-practical-timeline/</loc><lastmod>2025-11-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/q-a-common-questions-contractors-ask-about-managed-it/</loc><lastmod>2025-11-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-remote-access-to-scada-and-control-systems/</loc><lastmod>2025-11-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/payment-diversion-policy-a-template-outline-for-finance-teams/</loc><lastmod>2025-11-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/least-privilege-in-your-job-cost-system-roles-duties-reviews/</loc><lastmod>2025-11-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cmmc-2-0-levels-explained-which-one-applies-to-your-company/</loc><lastmod>2025-11-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/managed-it-fine-print-red-flags-in-contractor-service-agreements/</loc><lastmod>2025-11-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ot-vs-it-why-plant-and-field-systems-need-different-security/</loc><lastmod>2025-11-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/how-a-vendor-payment-diversion-scam-unfolds-step-by-step/</loc><lastmod>2025-11-04</lastmod></url><url><loc>https://ironfieldcyber.com/blog/a-45-minute-quarterly-procore-access-review-for-contractors/</loc><lastmod>2025-11-03</lastmod></url><url><loc>https://ironfieldcyber.com/blog/jobsite-wi-fi-and-network-security-setup-checklist/</loc><lastmod>2025-11-02</lastmod></url><url><loc>https://ironfieldcyber.com/blog/security-awareness-training-for-crews-without-desks/</loc><lastmod>2025-11-01</lastmod></url><url><loc>https://ironfieldcyber.com/blog/industrial-control-system-incident-response-tabletop-guide/</loc><lastmod>2025-10-31</lastmod></url><url><loc>https://ironfieldcyber.com/blog/payment-verification-policy-template-outline-contractors/</loc><lastmod>2025-10-30</lastmod></url><url><loc>https://ironfieldcyber.com/blog/autodesk-bim-collaboration-protecting-models-drawings/</loc><lastmod>2025-10-29</lastmod></url><url><loc>https://ironfieldcyber.com/blog/starlink-lte-failover-remote-energy-pipeline-sites/</loc><lastmod>2025-10-28</lastmod></url><url><loc>https://ironfieldcyber.com/blog/myths-vs-reality-contractors-cyber-risk/</loc><lastmod>2025-10-27</lastmod></url><url><loc>https://ironfieldcyber.com/blog/testing-your-backups-restore-drill-for-busy-contractors/</loc><lastmod>2025-10-26</lastmod></url><url><loc>https://ironfieldcyber.com/blog/building-a-system-security-plan-for-nist-sp-800-171/</loc><lastmod>2025-10-25</lastmod></url><url><loc>https://ironfieldcyber.com/blog/microsoft-365-settings-contractors-often-miss/</loc><lastmod>2025-10-24</lastmod></url><url><loc>https://ironfieldcyber.com/blog/rugged-devices-for-the-field-tablets-phones-laptops/</loc><lastmod>2025-10-23</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cyber-insurance-questions-contractors-should-expect/</loc><lastmod>2025-10-22</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ransomware-recovery-plan-first-24-hours-contractor/</loc><lastmod>2025-10-21</lastmod></url><url><loc>https://ironfieldcyber.com/blog/tsa-pipeline-security-directives-primer-for-operators/</loc><lastmod>2025-10-20</lastmod></url><url><loc>https://ironfieldcyber.com/blog/it-budgeting-for-a-contractor-where-money-should-go/</loc><lastmod>2025-10-19</lastmod></url><url><loc>https://ironfieldcyber.com/blog/securing-remote-vendor-access-to-industrial-equipment/</loc><lastmod>2025-10-18</lastmod></url><url><loc>https://ironfieldcyber.com/blog/phishing-lures-targeting-construction-staff-how-to-spot/</loc><lastmod>2025-10-17</lastmod></url><url><loc>https://ironfieldcyber.com/blog/backup-rules-for-ransomware-3-2-1-1-approach-explained/</loc><lastmod>2025-10-16</lastmod></url><url><loc>https://ironfieldcyber.com/blog/nerc-cip-concepts-small-utilities-and-contractors/</loc><lastmod>2025-10-15</lastmod></url><url><loc>https://ironfieldcyber.com/blog/onboarding-offboarding-it-checklist-field-crews/</loc><lastmod>2025-10-14</lastmod></url><url><loc>https://ironfieldcyber.com/blog/segmenting-ot-from-it-plain-english-guide-operators/</loc><lastmod>2025-10-13</lastmod></url><url><loc>https://ironfieldcyber.com/blog/spotting-fake-vendor-banking-change-before-you-pay/</loc><lastmod>2025-10-12</lastmod></url><url><loc>https://ironfieldcyber.com/blog/sage-300-cre-viewpoint-vista-security-checklist/</loc><lastmod>2025-10-11</lastmod></url><url><loc>https://ironfieldcyber.com/blog/cmmc-2-0-for-subcontractors-what-flows-down-to-you/</loc><lastmod>2025-10-10</lastmod></url><url><loc>https://ironfieldcyber.com/blog/what-managed-it-should-include-for-a-growing-contractor/</loc><lastmod>2025-10-09</lastmod></url><url><loc>https://ironfieldcyber.com/blog/ot-security-basics-energy-services-utility-operators/</loc><lastmod>2025-10-08</lastmod></url><url><loc>https://ironfieldcyber.com/blog/payment-diversion-fraud-how-contractors-lose-progress-payments/</loc><lastmod>2025-10-07</lastmod></url><url><loc>https://ironfieldcyber.com/blog/procore-security-settings-contractors-should-review/</loc><lastmod>2025-10-06</lastmod></url><url><loc>https://ironfieldcyber.com/blog/choosing-jobsite-internet-lte-5g-starlink-fiber/</loc><lastmod>2025-10-05</lastmod></url><url><loc>https://ironfieldcyber.com/blog/90-day-cybersecurity-starter-plan-small-contractors/</loc><lastmod>2025-10-04</lastmod></url></urlset>
