Cyber security might not be the first thing that comes to mind when appointing a building consultancy.
But for housing providers, local authorities and organisations managing large property portfolios, suppliers can interact with significant amounts of information – from property and asset data to reports, resident information and project documentation.
That makes cyber security more than an IT issue. It is increasingly part of good supplier management.
What is Cyber Essentials?
Cyber Essentials is a UK Government-backed cyber security certification scheme developed around five core technical controls designed to protect organisations against the most common internet-based cyber threats.
The National Cyber Security Centre (NCSC) describes it as the minimum standard of cyber security it recommends for organisations of all sizes.
The five areas covered are:
- Firewalls
- Secure configuration
- Security update management
- User access control
- Malware protection
Together, these controls establish a baseline for how an organisation protects its systems, devices and data from common cyber attacks.
Why does this matter to housing providers?
Modern property consultancy is increasingly digital.
Stock condition surveys, compliance programmes, inspection records, project information and other property data are routinely collected, processed and shared electronically.
And an organisation’s cyber security is only one part of the picture. Its supply chain matters too.
The NCSC specifically identifies suppliers and third parties as a potential source of cyber risk. It recommends Cyber Essentials as a tangible way for organisations to gain assurance that suppliers have fundamental technical controls in place.
This is particularly relevant when appointing consultants who may be working across large portfolios, collaborating with multiple stakeholders or accessing information on behalf of a client.
Cyber security is becoming part of procurement
Cyber credentials are also playing a growing role in procurement and supplier due diligence.
Cyber Essentials is already required for certain UK central government contracts, while the NCSC is encouraging organisations to consider the standard throughout their wider supply chains.
Government research into the scheme found that 75% of Cyber Essentials users surveyed said they had greater confidence working with certified suppliers, while 61% said they were more likely to choose a Cyber Essentials-certified supplier over one without certification.
For procurement teams, the value is straightforward: certification provides an independently recognised baseline rather than relying solely on a supplier saying that its systems are secure.
Building security into the way we work
For PM+, protecting client information and maintaining appropriate systems is part of providing a professional consultancy service.
PM+ holds Cyber Essentials certification, demonstrating that the core technical controls required by the scheme are in place.
But the certificate itself isn’t really the point.
What matters is what sits behind it: taking sensible steps to reduce cyber risk, protect the information entrusted to us and give clients greater confidence in the organisations operating within their supply chain.
As housing and property services become increasingly data-led, we believe that should simply be part of what clients expect from their consultants.
Working with PM+?
From stock condition surveys and compliance programmes to fire safety, environmental monitoring and project management, our teams support housing providers across the UK.
