laying the foundations for effective collaboration and
TRANSCRIPT
e-Guide
©2018 ThirdSpace
Laying the foundations for effective collaboration and security within the construction industry
03_ Foreword
05_ The industry’s changing business model
06_ Collaboration
07_ �Anytime, anywhere access
08_ �Cyber breaches and security
09_ �Data, data everywhere
10_ Security and collaboration tools are built into Microsoft 365
12_� Working in the ‘Third Space’
12_� Next steps
Contents
3
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
The construction industry is undergoing something of a revolution. A digital revolution!
Renowned�for�being�perennially�slow�at�adopting�new�and�emerging�technologies,�the�number�of�UK�construction�companies�that�are�now�leveraging�the�power�of�mobile�technology�and�cloud-based�solutions,�to�transform�the�way�they�operate,�is�rising�at�a�rapid�rate.�
The�cloud’s�strong�appeal�in�the�construction�sector�is�not�surprising.�It’s�an�industry�with�a�constant�turnover�of�mobile�workers,�frequent�changes�in�jobsite�locations�and�a�regular�requirement�to�work�collaboratively.�Construction�companies�are�therefore�uniquely�positioned�to�benefit�from�the�cloud’s�ability�to�provide�greater�freedom�and�ease�of�access�to�information�-�anytime,�anywhere.
Foreword
The cloud’s strong appeal in the construction sector is not surprising. It’s an industry with a constant turnover of mobile workers, frequent changes in jobsite locations and a regular requirement to work collaboratively.
Cloud�technology�has�some�huge�benefits,�including�enhancements�to�collaboration,�improved�business�agility�and�decision�making�coupled�with�reduced�costs�verses�expensive�on-premises�systems.�However,�security�and�access�to�cloud�applications�and�potentially�sensitive�data�and�information�remain�major�areas�of�concern.
In�this�guide,�we�address�the�importance�of�securing�access�to�cloud�applications�and�the�solutions�for�doing�so.�
4
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
Construction companies are uniquely positioned to benefit from the cloud’s ability to provide greater freedom and ease of access to information - anytime, anywhere.
5
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
The industry’s changing business model
The�construction�industry�contributes�around�£100�billion�to�the�UK�economy�each�year�and�accounts�for�nearly�6�%�of�the�country’s�Gross�Domestic�Product�(GDP)[1].�It’s�a�vast�industry�that�encompasses�one-man�bands�and�specialist�sub-contractors,�as�well�as�nearly�one�million�SMEs�and�many�multi-national�enterprises.
But�with�over�300,000�construction�businesses�in�the�UK,�it’s�also�a�fiercely�competitive�sector.�In�the�face�of�narrow�profit�margins,�increasing�energy,�materials�and�labour�costs,�digital�technology�is�fast�being�adopted�in�an�attempt�to�streamline�processes,�increase�efficiencies�and�achieve�targets.
Websites,�apps�and�smartphones�are�all�now�standard�tools�of�the�trade.�Add�into�the�mix�drones,�wearables,�robots,�Virtual�Reality�(VR),�3D�printers�and�the�Internet�of�Things�(IoT)�and�it’s�easy�to�see�why�digital�transformation�is�now�playing�such�an�important�role�within�the�industry.�
The�need�for�cloud�computing�is�being�further�exasperated�by�the�UK�government’s�development�of�the�Building�Information�Modelling�(BIM)�concept�and�its�2016�mandate�for�widespread�BIM�adoption.�The�construction�industry�has�traditionally�been�hampered�by�timely�access�to�accurate�and�up-to-date�project�data,�which�has�historically�had�a�detrimental�effect�on�project�deadlines.�BIM�was�established�to�alleviate�these�problems�by�calling�for�a�complete�digital�repository�of�all�information�regarding�a�building�or�infrastructure�project,�that�provides�high�levels�of�accessibility,�and�can�be�collaborated�on�by�all�members�of�a�project�team.��
The�government�mandate�states�that�all�centrally�funded�work�must�be�undertaken�using�BIM,�but�it�has�wider�connotations�than�just�those�companies�involved�in�those�particular�projects.�It�has�provided�the�foundation�for�a�changing�business�model�that�all�organisations�in the industry need to adapt to in order to stay relevant�and�competitive.�
It�goes�without�saying�that�companies�that�fail�to�see�the�advantages�of�technology�or�continue�to�underinvest�in�these�tools�won’t�have�the�competitive�edge�to�survive�in�this�rapidly�evolving�environment.
According to McKinsey research, 75% of those who adopted BIM reported a positive return on investment, shorter project life cycles and greater cost savings. However, to appreciate its full effects, it’s crucial for all stakeholders across the supply chain to be BIM-enabled. [2]
6
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
Today’s�construction�professionals�work�within�a�team,�but�in�more�recent�years,�“team”�has�taken�on�a�whole�new�meaning.�The�industry�is�becoming�increasingly�reliant�on�collaboration�and�knowledge�sharing�between�contractors,�subcontractors�and�other�agencies.�Cloud�computing�provides�an�efficient�and�robust�mechanism�for�main�contractors,�subcontractors,�project�managers,�architects�and�engineers,�as�well�as�office-based�personnel,�to�process�and�share�project�related�data�and�information.�And�of�course,�the�‘team’�on�any�given�project�is�constantly�changing�and�evolving,�as�are�access�right�requirements�to�the�data�and�information.
Construction�companies�therefore�need�to�understand�how�to�protect�their�information�and�operations.�By�applying�appropriate�security�measures,�organisations�can�attain�and�maintain�the�security�objectives�of�their�own�organisation�and�their�stakeholders�against�relevant�security�risks.
Collaboration
Today’s construction professionals work within a team, but in more recent years, “team” has taken on a whole new meaning.
Another�collaboration-related�challenge�comes�when�construction�companies�need�to�form�joint�ventures�for�a�bid�process.�This�can�often�require�an�organisation�to�have�to�act�quickly�to�incorporate�a�new�company�and�then�repurpose�existing�identities�with�new�email�addresses.�Historically�this�can�be�an�incredibly�time�consuming�task,�at�a�time�when�employees�need�fast�access�to�relevant�information�and�data.�The�ability�to�quickly�create�new�email�addresses�and�provide�appropriate�access�rights�is�essential�if�construction�companies�are�to�remain�competitive.�
7
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
The�construction�sector�is�also�an�industry�that�relies�heavily�on�providing�access�to�critical�project�data�from�just�about�anywhere�–�on�site,�off�site,�from�temporary�offices�and�from�permanent�HQs.�Before�the�cloud,�the�only�way�to�really�check�on�the�status�of�a�project�was�to�visit�the�site�in�person,�and�the�only�way�for�site�workers�to�access�project�information�was�to�visit�the�office�or�have�it�emailed�across�(file�size�depending).
Providing�the�right�people�on�site�with�timely�access�to�information�such�as�electrical�diagrams,�schematics�and�employee�records,�that�can�be�quickly�accessed�via�a�mobile�device�provides�invaluable�time�and�cost�efficiencies.�This�timely�access�also�minimises�mistakes�and�improves�profitability.�Problems�arise�however,�when�personal�data�or�intellectual�property�falls�into�the�wrong�hands.
Anytime, anywhere access
According to a new survey conducted by Construction News in association with Microsoft, 98% of the survey’s respondents saw “digitally enabling first line workers in the construction industry as at least reasonably important, with 63% thinking it extremely important.” [3]
8
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
According�to�statistics�released�by�the�UK�Government�and�The�Home�Office�in 2015[4],�there�were�77,000 incidents of online crime against construction companies.�In�recent�years,�cyber�criminals�have�significantly�changed�their�focus�and�moved�from�targeting�big,�valuable�brands�that�have�the�resources�to�spend�on�security,�to�small�and�medium�sized�businesses�that�are,�by�all�accounts,�easier�targets.��
The�loss�or�compromise�of�data�during�the�process�of�construction�can�be�catastrophic.�Delays�can�be�incredibly�costly�financially,�but�also�in�terms�of�trust�for�customers,�employees�and�suppliers�alike.�Of�course,�the�construction�industry�is�also�at�the�mercy�of�its�supply�chain.�Many�large�firms�rely�on�subcontractors,�who�may�not�have�the�same�priorities�regarding�security.�It�only�takes�one�ransomware�attack�on�a�subcontractor�for�essential�data�to�be�lost�or�compromised,�confidential�information�exposed,�reputations�destroyed…�and�the�list�goes�on.
These�days�as�much�attention�needs�to�be�paid�to�securing�access�to�information�and�data�in�the�cloud�as�it�does�to�securing�physical�access�to�construction�sites.�Plant�machinery�that�goes�missing�may�hold�up�a�project�but�can�easily�be�replaced.�When�data�is�stolen,�or�critical�project�information�gets�into�the�wrong�hands,�the�consequences�can�be�far�more�serious�and�have�longer-term�implications.�
Cyber breaches and security
9
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
With�this�changing�business�model�comes�a�wealth�of�data�and�information�that�requires�protecting,�such�as�building�blueprints�and�schematics,�details�on�critical�infrastructure�systems,�architectural�drawings,�as�well�as�customer,�supplier�and�employee�information,�including�bank�details,�NI�numbers,�medical�records�and�a�whole�host�of�other�private�and�sensitive�data.
In�an�age�where�data�is�fast�becoming�as�valuable�as�oil,�the�construction�sector,�which�contributes�enormously�to�the�UK’s�GDP,�is�particularly�vulnerable�to�security�breaches�and�cyber-crime.�
Phishing,�computer�viruses,�hacking�and�ransomware�are�considered�to�be�the�top�four�threats�to�cyber�security�for�UK�business.
Data, data everywhere
Not�only�does�the�loss�of�intellectual�property�and�personal�details�present�considerable�dangers,�the�introduction�of�GDPR�in�May�2018�has�put�data�privacy�responsibility�top�of�the�agenda.�No�one�wants�to�be�the�first�company�to�breach�the�regulations�and�face�a�fine�worth�4%�of�global�turnover.�
Construction�companies�will�inevitably�hold�personal�data�on�direct�employees�as�well�as�customers�and�suppliers.�In�addition,�they�will�have�to�process�and�store�data�relating�to�workers�procured�by�third�parties,�and�hold�data�collected�through�site�access�cards�and�CCTV.��In�line�with�GDPR�requirements,�all�this�data�needs�to�be�robustly�secured�and�protected�within�systems�and�applications.
Almost half (46%) of all UK businesses surveyed identified at least one cyber-security breach or attack in the past 12 months, rising to two-thirds among medium-sized (66%) and large companies (68%).
However, the responses from the construction sector suggest the industry may not be taking the threat sufficiently seriously. [5]
10
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
Microsoft’s�technologies�work�seamlessly�together�to�provide�your�organisation�with�benefits�like�identity-driven�security�–�a�holistic�approach that addresses the sophisticated challenges�of�today’s�new�attack�landscape.�They�also�integrate�with�your�existing�Microsoft�investments�(such�as�O365)�to�ensure�you�actually�gain�tighter�control�and�increased�security�without�having�to�impose�complex�processes�and�changing�the�way�people�work.
Microsoft�has�robust�policies,�controls,�and�systems�built�into�Office�365�to�help�keep�your�information�safe.�Its�intelligent�security�capabilities�result�in�comprehensive�solutions�across�identity�and�access�management,�threat�protection,�information�protection�and�security�management.�
Security and collaboration tools are built into Microsoft 365
Key technologies for the construction industry include:
Azure Information Protection
Files�and�business�information�need�to�be�shared�between�co-workers,�partners,�suppliers,�customers,�sub-contractors�and�other�agencies.�Without�visibility�of�who�has�access�and�what�they�are�doing�with�the�information,�you�are�at�risk�of�a�breach.
Azure�Information�Protection�lets�you�control�who�has�access�to�your�critical�data,�documents�and�email,�and�define�how�they�are�allowed�to�use�it�by�encrypting�files,�so�you�can�track�them�outside�your�network�and�be�sure�your�sensitive�data�isn’t�in�the�wrong�hands.
Azure Active Directory
A�common�challenge�for�many�construction�companies�centres�around�achieving�the�right�control�and�governance�of�new�cloud�applications.�You�want�to�simplify�access�for�users,�so�they�can�work�efficiently,�but�you�don’t�want�to�leave�your�company’s�resources�unprotected.
For�organisations�looking�to�extend�their�identity�and�access�management�capabilities�into�the�cloud,�we�implement�a�solution�based�on�Microsoft’s�Azure�Active�Directory.�It�enables�you�to�centrally�control�access�to�applications�and�resources�both�in�the�cloud�and�on-premise.�Users�get�single�sign-on�(SSO)�access�to�their�apps,�while�you�set�rules�and�policies�that�control�who�has�access�under�designated�conditions.
Intune
With�a�growing�number�of�users�bringing�their�own�devices�to�the�workplace,�keeping�your�organisation’s�data�secure�has�never�been�more�challenging.�In�addition,�users�expect�access�to�corporate�applications,�data�and�other�resources�from�virtually�anywhere.
Microsoft�Intune�is�a�cloud-based�mobile�device,�mobile�application�and�PC�management�solution.�Users�can�gain�access�to�resources�on�their�own�devices�(Android,�iOS�and�Windows)�without�increasing�complexity�for�your�IT�department.
11
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
Deploying the biggest firewall you can find is no longer going to cut it.
We have been supporting construction companies, including Balfour Beatty, Galliford Try, Arup and Wates Group with Identity, Enterprise Mobility and Security solutions for over ten years.
A complete intelligent solution
12
e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry
thirdspace.net
Our�Security�and�Privacy�Service�offering�evaluates�and�advances�your�data�security�and�privacy�posture�against�recognised�industry�standards�for�security�governance�and�management.�Our�solutions�offering�incorporates�Microsoft�365�as�a�complete�intelligent�solution�including�Office�365,�Enterprise�Mobility�+�Security�and�Windows�10.
Our�engagement�with�you�would�typically�start�with�a�Current�State�Assessment,�where�we�use�a�variety�of�analytical�tools�to�define�an�up-to�date�security�and�compliance�posture�score�for�your�business.��
At�the�end�of�the�assessment�stage,�we�will�build�a�unique�dashboard�detailing�your�business�performance�across�six�key�areas�relating�to�security�and�privacy,�including:
� Identity�and�access�management
� Information�protection
� Threat protection
� Security�management
� Awareness
� Governance
1.� Construction�Management�Solutions�(April�10�2018).�“The�State�of�the�UK�Construction�Industry:�2018”.��[accessed�20.09.2018].
2.� Argarwal�R�et�al.�(June�2016).�“Imagining�construction’s�digital�future”.��[accessed�16.09.18].
3.� Schünmann,�D�(June�7�2018).�“Firms�support�‘digitally�empowering’�site�workers”.��[accessed�17.09.18].
Working in the ‘third space’
References
We�will�then�create�a�detailed�business�report�and�defined�remediation�roadmap,�covering�security�policy,�procedures�and�technology.�The�report�will�aid�communication�to�the�C-Suite�by�detailing�ROI�and�building�a�business�case�for�a�security�service.
Going�forward,�our�enablement�stages�then�involve�a�series�of�strategic�planning�and�implementation�workshops�focusing�on�deploying�key�solutions�in�the�defined�areas�of�importance�in�line�with�your�organisations�needs.�
4.� Stead,�S�(November�30�2017).�“Cyber�Security�in�the�Construction�Industry”.��[accessed�20.09.18].
5.� Watson,�S�(January�22�2018).�“Cyber-security:�What�will�it�take�for�construction�to�act?”.��[accessed�15.09.18].������
How do you score on security and privacy?Find out in just two minutes and receive a free tailored report with actionable insights.
GET�MY�REPORT
About ThirdSpace
Our�vision�at�ThirdSpace�is�an�environment�in�which�all�organisations�can�unleash�the�full�power�of�the�digital�economy,�securely.�
We�believe�that�when�you�know�your�data�and�your�customers’�data�is�secure,�and�you�are�in�control�of�who�has�access�to�your�systems,�you�are�free�to�work�creatively�and�collaboratively.�We�focus�on�Microsoft�intelligent�identity�and�security�technologies�that�underpin�secure�modern�workplaces.�This�in�turn�provides�organisations�with�the�control�to�liberate�their�workforce�and�unleash�business�potential.
Our�ability�to�achieve�real�business�value�for�our�customers�has�been�recognised�by�Microsoft�through�multiple�Partner�of�the�Year�nominations�and�our�Gold�Competencies.�We�have�been�voted�‘the�best’�eight�times�to�date�for�Identity�and�Access,�Enterprise�Mobility,�and�Security�and�Compliance�categories.�
“There�is�no�other�partner�in�the�world�we�work�with�more�closely.”�— Alex Simons, Microsoft
Microsoft�develop�the�market-leading�tools;�we�provide�the�vision�and�innovation�to�ensure�our�customers�capitalise�on�the�opportunities�new�technology�brings.
ThirdSpace 6th�Floor� Seacourt�Tower�West�Way Oxford,�Oxfordshire OX2�0JJ
0800�044�5009 [email protected] thirdspace.netw