Site Network and BIM Data Path Governance

Construction projects involve dozens of contractors sharing temporary networks on active sites. BIM models, structural calculations, and building management systems contain sensitive data that defines the physical security of the built environment.

100%

BIM data path isolation from site networks

Zero

Persistent contractor access between visits

4

Site network zones with independent governance

Full

BIM security and ISO 19650 compliance

"We found the BIM model for a Ministry of Defence facility on a contractor's personal laptop. It contained the complete security system layout, structural details, and utility routing. The contractor had left the project six months earlier."

Where each module is deployed, and what it does there.

One row per module. Placement on the network, then plain-English purpose at that point.

1. Firebreak

   On the C0 to C1 link and the supply chain link

   Real hardware off switches on the public and supplier boundaries, ready to cut the live path the moment a supply chain incident is called.

2. Validate

   On the C0 to C1 link and the C1 to C2 link

   Requests crossing into project systems are checked for origin, integrity and authority.

3. Isolate

   On the C1 to C2 link

   Office and project systems sit on their own fabrics. A compromise in office does not reach the designs.

4. Transfer

   On the C2 to C3 link

   When designs and data move to site, Transfer governs the route and the landing point.

5. Lock

   On the C2 to C3 link

   Site access ties to named users with the right role.

6. Relay

   On the supply chain link

   Supplier access opens for the window of work and not a minute more.

7. Unlink

   On the supply chain link

   When a supplier engagement ends, Unlink removes the persistent connection and the inherited trust.

Sovereign Project Data

All BIM models and project data remain within the agreed jurisdiction in secured Firevault Bunkers, meeting government construction security requirements.

Multi-Contractor Governance

Each contractor organisation receives isolated access paths with independent authorisation and logging, preventing cross-contractor compromise.

ISO 19650 Compliance

Automated compliance logging supports ISO 19650 information management requirements and government construction security standards.

Site Cellular Management

Out-of-band management via cellular connectivity ensures governance capability independent of temporary site network infrastructure.

Project Audit Trail

Every access to BIM data and building systems is recorded in tamper-proof logs that persist beyond the construction phase.

Project Data Archive

Verified baselines of project configuration ensure long-term preservation beyond the life of temporary construction site infrastructure.

Project Security Assessment

Assess BIM data sensitivity, contractor access requirements, and building management system connectivity for the project or estate.

Site Zone Architecture

Design physically separated zones for general site access, BIM collaboration, building management, and corporate project systems.

Single Site Pilot

Deploy on a representative construction site with full contractor access governance, BIM data isolation, and compliance logging.

Estate-Wide Adoption

Standardised deployment across all construction sites with centralised data archives, continuous compliance evidence, and cellular management.