Author:Â Jason Law, Group IT director at UK housebuilder Avant Homes
Cyber security is not something that businesses should consider an afterthought; it should be a crucial part of any company’s IT strategy. To neglect a strong cyber posture is to potentially expose a business’s financial and operational infrastructure to an ever-changing world of sophisticated and increasingly threatening attacks. In the housebuilding sector, the importance of cyber security mustn’t be lost behind the processes of delivery. While housebuilding is not always considered the most technologically advanced industry, cyber security remains essential for growth and success.
An internal and external focus on cyber security
Avant Homes has implemented a comprehensive cybersecurity framework to safeguard its digital assets and operations and to complement its cloud-first strategy.
We recognise that cybersecurity across the supply chain – not only within the business – is critical for the housebuilding sector. We work with cyber partners to conduct internal and external penetration testing to ensure robustness.
Recognising the importance of a well-informed workforce, we also conduct regular cybersecurity training sessions for our employees.
These sessions cover topics such as phishing awareness, password management, and secure browsing practices. This training is mandatory and regularly reinforced with monthly 15-minute sessions to ensure cyber security is kept at the forefront of people’s minds.
Fostering a culture of vigilance and responsibility ensures that staff are well-equipped to recognise and respond to potential threats effectively.
Avant Homes has also implemented a comprehensive cybersecurity incident response process, policy and reporting, which has executive approval and involvement. As well as a range of preventative measures, this also includes performing tabletop exercises, which ensure that the incident response process is secure and efficient through the development of scenario playbooks.
Regular reviews are conducted within the company, which not only help to identify and address our current security posture but also ensure continuous improvement and adaptation to the ever-changing cyber landscape.
Cyber security matters in the housebuilding industry
Cyber security is critical for the housebuilding sector because the entire operation relies on numerous interconnected systems, processes and businesses to deliver new homes.
A breach at any point of this process can potentially compromise the entire network, leading to significant operational issues and the ultimate breakdown of delivery.
Housebuilders need to conduct thorough due diligence on cyber security practices not only within their own company but also throughout their suppliers and partners. This includes assessing their security policies, incident response plans and compliance with industry standards.
Addressing these challenges requires a proactive and collaborative approach. All key stakeholders must be on board with implementing rigorous cyber safety practices, from the bottom of an organisation to the top.
Maintaining a strong cyber posture
Companies should ideally review and update their cyber security protocols on at least an annual basis. However, given the rapidly evolving nature of cyber threats, it is wise to conduct more frequent assessments.
Regular reviews ensure that existing measures are effective and help to identify any new vulnerabilities that may have emerged. Additionally, employee training and awareness programs should be conducted periodically to keep staff informed about the latest threats and best practices in cyber security.
Cyber security is an ongoing challenge. As the individuals and groups conducting cyber attacks develop and improve their hacking methods, companies, too, must enhance their protection against such threats.
Cyber security in the future
Cyber security measures will likely see significant advancements driven by emerging technologies and evolving threats. The increased integration of artificial intelligence and machine learning to predict and respond to cyber threats more efficiently is a likely route forward.
These technologies can analyse vast amounts of data to identify patterns, anomalies and potential vulnerabilities in real-time, enabling quicker mitigation of risks.
As technology advances, continued awareness, understanding and prioritisation of cybersecurity will be key for any business operating in the housebuilding sector.
For inquiries, please contact vaishnavi.nashte@31media.co.uk
