Skip to main content
FREE RESOURCE

Is your construction IT actually
protecting projects and money?

A small Australian builder moves large invoices through email, holds tender documents, runs site supervisors on phones and tablets, and depends on subcontractor relationships. All of which attackers exploit. This audit walks you through the IT controls.

CHECKLIST · 8 PAGES · 12 MIN

Get the audit, sent to your inbox

Your email + business name. That's all. We send the PDF immediately and add you to Tech News Monthly (unsubscribe any time).

Download the audit

Instant access. No credit card, no phone call.

By downloading you agree to receive Tech News Monthly (monthly summary of cyber + IT news for Aus SMBs). Unsubscribe any time. See our privacy policy.

What's inside

  • Identity and access checks for project systems, tender portals, M365, and banking
  • Where tender documents and project files should live
  • Subcontractor and supplier bank-detail fraud defence (the highest-loss event in Australian construction)
  • The three things every builder should fix first

Format

8-page PDF · A4 · ~404 KB · readable on any device

IS THIS FOR YOU

Written for Australian builders, head contractors, and trade contractors

You'll get value from this if

  • You run a 10 to 100 staff construction business and want a structured IT security review
  • A principal contractor or government client asked about your cyber posture
  • A peer was hit with an invoice fraud or BEC attack and lost real money

This is not

  • Advice on tender cyber clauses, head contractor requirements, or building regulator compliance
  • A formal IT audit (that is the CIO Tech IT Audit, fixed scope, fixed fee)
  • A substitute for staff training on email and bank-detail change requests

Cyber Posture Snapshot

Your details 1 / 10

How exposed is your business?

Six quick questions, two short ones to tailor the result, and you'll see where your business stands. About two minutes. Plain English, no jargon.

We'll use your email to send a copy of your result. No spam, no pushy sales calls.

Question 1 of 9

When your team logs in to email and business apps, do they need a code from their phone as well as a password?

Question 2 of 9

If a ransomware attack locked all your files tomorrow, could you restore them from a backup?

Question 3 of 9

When Microsoft or Apple release a critical security update, how fast does it land on your computers?

Question 4 of 9

How many people in your business can install software or change system settings on any work computer?

Question 5 of 9

If a staff member got a fake invoice or "urgent" email pretending to be from you right now, what would happen?

Question 6 of 9

When a staff member leaves, when does their access to email, files, and apps actually get cut off?

Question 7 of 9

How many people work in your business?

Question 8 of 9

Who looks after your IT today?

Question 9 of 9

What sort of business are you?

Tailoring your result...

Hi there, here's where your business stands.

Your Cyber Posture
Critical gaps Critical
Notable exposure Notable
Mixed picture Mixed
On the right track On track

Notable exposure

Your two biggest gaps

  1. 1
  2. 2

Where this leaves you on Essential Eight

  • MFA Multi-factor authentication
  • Backups Regular backups
  • Patching Covers 2 of 8: Patch applications + Patch operating systems
  • Admin access Restrict administrative privileges

This snapshot covers 5 of the 8 Essential Eight controls. The full IT Maturity Assessment covers all 8, plus Microsoft 365 hardening, device management, and staff training.

What to do next

Primary CTA

Secondary CTA