laying the foundations for effective collaboration and

13
e-Guide ©2018 ThirdSpace Laying the foundations for effective collaboration and security within the construction industry

Upload: others

Post on 20-Mar-2022

1 views

Category:

Documents


0 download

TRANSCRIPT

e-Guide

©2018 ThirdSpace

Laying the foundations for effective collaboration and security within the construction industry

03_ Foreword

05_ The industry’s changing business model

06_  Collaboration

07_ �Anytime, anywhere access

08_ �Cyber breaches and security

09_ �Data, data everywhere

10_ Security and collaboration tools are built into Microsoft 365

12_� Working in the ‘Third Space’

12_� Next steps

Contents

3

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

The construction industry is undergoing something of a revolution. A digital revolution!

Renowned�for�being�perennially�slow�at�adopting�new�and�emerging�technologies,�the�number�of�UK�construction�companies�that�are�now�leveraging�the�power�of�mobile�technology�and�cloud-based�solutions,�to�transform�the�way�they�operate,�is�rising�at�a�rapid�rate.�

The�cloud’s�strong�appeal�in�the�construction�sector�is�not�surprising.�It’s�an�industry�with�a�constant�turnover�of�mobile�workers,�frequent�changes�in�jobsite�locations�and�a�regular�requirement�to�work�collaboratively.�Construction�companies�are�therefore�uniquely�positioned�to�benefit�from�the�cloud’s�ability�to�provide�greater�freedom�and�ease�of�access�to�information�-�anytime,�anywhere.

Foreword

The cloud’s strong appeal in the construction sector is not surprising. It’s an industry with a constant turnover of mobile workers, frequent changes in jobsite locations and a regular requirement to work collaboratively.

Cloud�technology�has�some�huge�benefits,�including�enhancements�to�collaboration,�improved�business�agility�and�decision�making�coupled�with�reduced�costs�verses�expensive�on-premises�systems.�However,�security�and�access�to�cloud�applications�and�potentially�sensitive�data�and�information�remain�major�areas�of�concern.

In�this�guide,�we�address�the�importance�of�securing�access�to�cloud�applications�and�the�solutions�for�doing�so.�

4

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

Construction companies are uniquely positioned to benefit from the cloud’s ability to provide greater freedom and ease of access to information - anytime, anywhere.

5

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

The industry’s changing business model

The�construction�industry�contributes�around�£100�billion�to�the�UK�economy�each�year�and�accounts�for�nearly�6�%�of�the�country’s�Gross�Domestic�Product�(GDP)[1].�It’s�a�vast�industry�that�encompasses�one-man�bands�and�specialist�sub-contractors,�as�well�as�nearly�one�million�SMEs�and�many�multi-national�enterprises.

But�with�over�300,000�construction�businesses�in�the�UK,�it’s�also�a�fiercely�competitive�sector.�In�the�face�of�narrow�profit�margins,�increasing�energy,�materials�and�labour�costs,�digital�technology�is�fast�being�adopted�in�an�attempt�to�streamline�processes,�increase�efficiencies�and�achieve�targets.

Websites,�apps�and�smartphones�are�all�now�standard�tools�of�the�trade.�Add�into�the�mix�drones,�wearables,�robots,�Virtual�Reality�(VR),�3D�printers�and�the�Internet�of�Things�(IoT)�and�it’s�easy�to�see�why�digital�transformation�is�now�playing�such�an�important�role�within�the�industry.�

The�need�for�cloud�computing�is�being�further�exasperated�by�the�UK�government’s�development�of�the�Building�Information�Modelling�(BIM)�concept�and�its�2016�mandate�for�widespread�BIM�adoption.�The�construction�industry�has�traditionally�been�hampered�by�timely�access�to�accurate�and�up-to-date�project�data,�which�has�historically�had�a�detrimental�effect�on�project�deadlines.�BIM�was�established�to�alleviate�these�problems�by�calling�for�a�complete�digital�repository�of�all�information�regarding�a�building�or�infrastructure�project,�that�provides�high�levels�of�accessibility,�and�can�be�collaborated�on�by�all�members�of�a�project�team.��

The�government�mandate�states�that�all�centrally�funded�work�must�be�undertaken�using�BIM,�but�it�has�wider�connotations�than�just�those�companies�involved�in�those�particular�projects.�It�has�provided�the�foundation�for�a�changing�business�model�that�all�organisations�in the industry need to adapt to in order to stay relevant�and�competitive.�

It�goes�without�saying�that�companies�that�fail�to�see�the�advantages�of�technology�or�continue�to�underinvest�in�these�tools�won’t�have�the�competitive�edge�to�survive�in�this�rapidly�evolving�environment.

According to McKinsey research, 75% of those who adopted BIM reported a positive return on investment, shorter project life cycles and greater cost savings. However, to appreciate its full effects, it’s crucial for all stakeholders across the supply chain to be BIM-enabled. [2]

6

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

Today’s�construction�professionals�work�within�a�team,�but�in�more�recent�years,�“team”�has�taken�on�a�whole�new�meaning.�The�industry�is�becoming�increasingly�reliant�on�collaboration�and�knowledge�sharing�between�contractors,�subcontractors�and�other�agencies.�Cloud�computing�provides�an�efficient�and�robust�mechanism�for�main�contractors,�subcontractors,�project�managers,�architects�and�engineers,�as�well�as�office-based�personnel,�to�process�and�share�project�related�data�and�information.�And�of�course,�the�‘team’�on�any�given�project�is�constantly�changing�and�evolving,�as�are�access�right�requirements�to�the�data�and�information.

Construction�companies�therefore�need�to�understand�how�to�protect�their�information�and�operations.�By�applying�appropriate�security�measures,�organisations�can�attain�and�maintain�the�security�objectives�of�their�own�organisation�and�their�stakeholders�against�relevant�security�risks.

Collaboration

Today’s construction professionals work within a team, but in more recent years, “team” has taken on a whole new meaning.

Another�collaboration-related�challenge�comes�when�construction�companies�need�to�form�joint�ventures�for�a�bid�process.�This�can�often�require�an�organisation�to�have�to�act�quickly�to�incorporate�a�new�company�and�then�repurpose�existing�identities�with�new�email�addresses.�Historically�this�can�be�an�incredibly�time�consuming�task,�at�a�time�when�employees�need�fast�access�to�relevant�information�and�data.�The�ability�to�quickly�create�new�email�addresses�and�provide�appropriate�access�rights�is�essential�if�construction�companies�are�to�remain�competitive.�

7

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

The�construction�sector�is�also�an�industry�that�relies�heavily�on�providing�access�to�critical�project�data�from�just�about�anywhere�–�on�site,�off�site,�from�temporary�offices�and�from�permanent�HQs.�Before�the�cloud,�the�only�way�to�really�check�on�the�status�of�a�project�was�to�visit�the�site�in�person,�and�the�only�way�for�site�workers�to�access�project�information�was�to�visit�the�office�or�have�it�emailed�across�(file�size�depending).

Providing�the�right�people�on�site�with�timely�access�to�information�such�as�electrical�diagrams,�schematics�and�employee�records,�that�can�be�quickly�accessed�via�a�mobile�device�provides�invaluable�time�and�cost�efficiencies.�This�timely�access�also�minimises�mistakes�and�improves�profitability.�Problems�arise�however,�when�personal�data�or�intellectual�property�falls�into�the�wrong�hands.

Anytime, anywhere access

According to a new survey conducted by Construction News in association with Microsoft, 98% of the survey’s respondents saw “digitally enabling first line workers in the construction industry as at least reasonably important, with 63% thinking it extremely important.” [3]

8

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

According�to�statistics�released�by�the�UK�Government�and�The�Home�Office�in 2015[4],�there�were�77,000 incidents of online crime against construction companies.�In�recent�years,�cyber�criminals�have�significantly�changed�their�focus�and�moved�from�targeting�big,�valuable�brands�that�have�the�resources�to�spend�on�security,�to�small�and�medium�sized�businesses�that�are,�by�all�accounts,�easier�targets.��

The�loss�or�compromise�of�data�during�the�process�of�construction�can�be�catastrophic.�Delays�can�be�incredibly�costly�financially,�but�also�in�terms�of�trust�for�customers,�employees�and�suppliers�alike.�Of�course,�the�construction�industry�is�also�at�the�mercy�of�its�supply�chain.�Many�large�firms�rely�on�subcontractors,�who�may�not�have�the�same�priorities�regarding�security.�It�only�takes�one�ransomware�attack�on�a�subcontractor�for�essential�data�to�be�lost�or�compromised,�confidential�information�exposed,�reputations�destroyed…�and�the�list�goes�on.

These�days�as�much�attention�needs�to�be�paid�to�securing�access�to�information�and�data�in�the�cloud�as�it�does�to�securing�physical�access�to�construction�sites.�Plant�machinery�that�goes�missing�may�hold�up�a�project�but�can�easily�be�replaced.�When�data�is�stolen,�or�critical�project�information�gets�into�the�wrong�hands,�the�consequences�can�be�far�more�serious�and�have�longer-term�implications.�

Cyber breaches and security

9

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

With�this�changing�business�model�comes�a�wealth�of�data�and�information�that�requires�protecting,�such�as�building�blueprints�and�schematics,�details�on�critical�infrastructure�systems,�architectural�drawings,�as�well�as�customer,�supplier�and�employee�information,�including�bank�details,�NI�numbers,�medical�records�and�a�whole�host�of�other�private�and�sensitive�data.

In�an�age�where�data�is�fast�becoming�as�valuable�as�oil,�the�construction�sector,�which�contributes�enormously�to�the�UK’s�GDP,�is�particularly�vulnerable�to�security�breaches�and�cyber-crime.�

Phishing,�computer�viruses,�hacking�and�ransomware�are�considered�to�be�the�top�four�threats�to�cyber�security�for�UK�business.

Data, data everywhere

Not�only�does�the�loss�of�intellectual�property�and�personal�details�present�considerable�dangers,�the�introduction�of�GDPR�in�May�2018�has�put�data�privacy�responsibility�top�of�the�agenda.�No�one�wants�to�be�the�first�company�to�breach�the�regulations�and�face�a�fine�worth�4%�of�global�turnover.�

Construction�companies�will�inevitably�hold�personal�data�on�direct�employees�as�well�as�customers�and�suppliers.�In�addition,�they�will�have�to�process�and�store�data�relating�to�workers�procured�by�third�parties,�and�hold�data�collected�through�site�access�cards�and�CCTV.��In�line�with�GDPR�requirements,�all�this�data�needs�to�be�robustly�secured�and�protected�within�systems�and�applications.

Almost half (46%) of all UK businesses surveyed identified at least one cyber-security breach or attack in the past 12 months, rising to two-thirds among medium-sized (66%) and large companies (68%).

However, the responses from the construction sector suggest the industry may not be taking the threat sufficiently seriously. [5]

10

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

Microsoft’s�technologies�work�seamlessly�together�to�provide�your�organisation�with�benefits�like�identity-driven�security�–�a�holistic�approach that addresses the sophisticated challenges�of�today’s�new�attack�landscape.�They�also�integrate�with�your�existing�Microsoft�investments�(such�as�O365)�to�ensure�you�actually�gain�tighter�control�and�increased�security�without�having�to�impose�complex�processes�and�changing�the�way�people�work.

Microsoft�has�robust�policies,�controls,�and�systems�built�into�Office�365�to�help�keep�your�information�safe.�Its�intelligent�security�capabilities�result�in�comprehensive�solutions�across�identity�and�access�management,�threat�protection,�information�protection�and�security�management.�

Security and collaboration tools are built into Microsoft 365

Key technologies for the construction industry include:

Azure Information Protection

Files�and�business�information�need�to�be�shared�between�co-workers,�partners,�suppliers,�customers,�sub-contractors�and�other�agencies.�Without�visibility�of�who�has�access�and�what�they�are�doing�with�the�information,�you�are�at�risk�of�a�breach.

Azure�Information�Protection�lets�you�control�who�has�access�to�your�critical�data,�documents�and�email,�and�define�how�they�are�allowed�to�use�it�by�encrypting�files,�so�you�can�track�them�outside�your�network�and�be�sure�your�sensitive�data�isn’t�in�the�wrong�hands.

Azure Active Directory

A�common�challenge�for�many�construction�companies�centres�around�achieving�the�right�control�and�governance�of�new�cloud�applications.�You�want�to�simplify�access�for�users,�so�they�can�work�efficiently,�but�you�don’t�want�to�leave�your�company’s�resources�unprotected.

For�organisations�looking�to�extend�their�identity�and�access�management�capabilities�into�the�cloud,�we�implement�a�solution�based�on�Microsoft’s�Azure�Active�Directory.�It�enables�you�to�centrally�control�access�to�applications�and�resources�both�in�the�cloud�and�on-premise.�Users�get�single�sign-on�(SSO)�access�to�their�apps,�while�you�set�rules�and�policies�that�control�who�has�access�under�designated�conditions.

Intune

With�a�growing�number�of�users�bringing�their�own�devices�to�the�workplace,�keeping�your�organisation’s�data�secure�has�never�been�more�challenging.�In�addition,�users�expect�access�to�corporate�applications,�data�and�other�resources�from�virtually�anywhere.

Microsoft�Intune�is�a�cloud-based�mobile�device,�mobile�application�and�PC�management�solution.�Users�can�gain�access�to�resources�on�their�own�devices�(Android,�iOS�and�Windows)�without�increasing�complexity�for�your�IT�department.

11

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

Deploying the biggest firewall you can find is no longer going to cut it.

We have been supporting construction companies, including Balfour Beatty, Galliford Try, Arup and Wates Group with Identity, Enterprise Mobility and Security solutions for over ten years.

A complete intelligent solution

12

e-Guide Laying�the�foundations�for�effective�collaboration�and�security�within����������the construction industry

thirdspace.net

Our�Security�and�Privacy�Service�offering�evaluates�and�advances�your�data�security�and�privacy�posture�against�recognised�industry�standards�for�security�governance�and�management.�Our�solutions�offering�incorporates�Microsoft�365�as�a�complete�intelligent�solution�including�Office�365,�Enterprise�Mobility�+�Security�and�Windows�10.

Our�engagement�with�you�would�typically�start�with�a�Current�State�Assessment,�where�we�use�a�variety�of�analytical�tools�to�define�an�up-to�date�security�and�compliance�posture�score�for�your�business.��

At�the�end�of�the�assessment�stage,�we�will�build�a�unique�dashboard�detailing�your�business�performance�across�six�key�areas�relating�to�security�and�privacy,�including:

� Identity�and�access�management

� Information�protection

� Threat protection

� Security�management

� Awareness

� Governance

1.� Construction�Management�Solutions�(April�10�2018).�“The�State�of�the�UK�Construction�Industry:�2018”.��[accessed�20.09.2018].

2.� Argarwal�R�et�al.�(June�2016).�“Imagining�construction’s�digital�future”.��[accessed�16.09.18].

3.� Schünmann,�D�(June�7�2018).�“Firms�support�‘digitally�empowering’�site�workers”.��[accessed�17.09.18].

Working in the ‘third space’

References

We�will�then�create�a�detailed�business�report�and�defined�remediation�roadmap,�covering�security�policy,�procedures�and�technology.�The�report�will�aid�communication�to�the�C-Suite�by�detailing�ROI�and�building�a�business�case�for�a�security�service.

Going�forward,�our�enablement�stages�then�involve�a�series�of�strategic�planning�and�implementation�workshops�focusing�on�deploying�key�solutions�in�the�defined�areas�of�importance�in�line�with�your�organisations�needs.�

4.� Stead,�S�(November�30�2017).�“Cyber�Security�in�the�Construction�Industry”.��[accessed�20.09.18].

5.� Watson,�S�(January�22�2018).�“Cyber-security:�What�will�it�take�for�construction�to�act?”.��[accessed�15.09.18].������

How do you score on security and privacy?Find out in just two minutes and receive a free tailored report with actionable insights.

GET�MY�REPORT

About ThirdSpace

Our�vision�at�ThirdSpace�is�an�environment�in�which�all�organisations�can�unleash�the�full�power�of�the�digital�economy,�securely.�

We�believe�that�when�you�know�your�data�and�your�customers’�data�is�secure,�and�you�are�in�control�of�who�has�access�to�your�systems,�you�are�free�to�work�creatively�and�collaboratively.�We�focus�on�Microsoft�intelligent�identity�and�security�technologies�that�underpin�secure�modern�workplaces.�This�in�turn�provides�organisations�with�the�control�to�liberate�their�workforce�and�unleash�business�potential.

Our�ability�to�achieve�real�business�value�for�our�customers�has�been�recognised�by�Microsoft�through�multiple�Partner�of�the�Year�nominations�and�our�Gold�Competencies.�We�have�been�voted�‘the�best’�eight�times�to�date�for�Identity�and�Access,�Enterprise�Mobility,�and�Security�and�Compliance�categories.�

“There�is�no�other�partner�in�the�world�we�work�with�more�closely.”�— Alex Simons, Microsoft

Microsoft�develop�the�market-leading�tools;�we�provide�the�vision�and�innovation�to�ensure�our�customers�capitalise�on�the�opportunities�new�technology�brings.

ThirdSpace 6th�Floor� Seacourt�Tower�West�Way Oxford,�Oxfordshire OX2�0JJ

0800�044�5009 [email protected] thirdspace.netw