Industry Solutions

Property

Cyber Security in Property and Real Estate

Digitisation is playing an increasingly important role in the day-to-day operations of housing associations and property developers, helping these organisations to better communicate with tenants, clients and partners, improve efficiency and streamline services.

Organisations in the property sector hold vast quantities of confidential information relating to tenants, employees and partners and this makes them a target for hackers. These organisations must ensure they understand the rising threat of cybercrime and have the necessary people, technology and processes in place to mitigate the risks.

Common security challenges in property include:

Maintaining the availability and accessibility of services
Ensuing payments are processed efficiently and securely
Protecting the personal data of buyers and tenants
Balancing technological transformation with security
Identifying and eliminating building management system vulnerabilities
Mitigating security risks within the supply chain
Complying with PCI and GDPR requirements
 

Key security questions in Property

Security questions organisations in the property sector should be asking:

  • How is buyer and tenant data processed and protected?
  • How often is digital infrastructure tested for vulnerabilities?
  • Are security controls in place to defend against targeted attacks?
  • Are systems able to identify threats that bypass the perimeter?
  • Is there a plan in place to detect, remediate and report breaches?
  • What systems and controls are in place to mitigate insider threats?
  • Is card payment processing PCI DSS compliant?

Cyber security compliance in the Property sector

Housing associations, estate agents and property developers that take online card payments need to comply with the Payment Card Industry Data Security Standard (PCI DSS). Requirements include maintaining a secure network, implementing robust security policies, regularly testing systems for weaknesses and proactively monitoring network infrastructure.

Almost all organisations in the housing sector process personal data so must also comply with the requirements of the GDPR and DPA 2018. To achieve compliance, organisations must continually assess data security risks and ensure personal data is protected against unauthorised processing, accidental loss or destruction. Non-compliance and failure to report breaches within 72 hours could lead to a large fine.

€20 million or 4% of global turnover (whichever is greater)
The maximum GDPR penalty for a cyber security breach.
 

About Redscan

 
Redscan has experience working with housing associations, estate agents and property developers, helping them to assess their security risks, identify and eliminate vulnerabilities, proactively detect and respond to threats across their environments and meet complex compliance requirements.

View our case studies

Our managed security solutions

Managed Detection and Response

Functioning as an extension of in-house IT resources, ThreatDetect™ is an award-winning MDR service supplying the capabilities needed to monitor, hunt for and remediate cyber-attacks and breaches 24/7.

Red Team Operations

Experience a real-world cyber-attack simulation to identify the weaknesses an attacker could exploit, quantify the value of data that could be exfiltrated and assess the effectiveness of security investments.

Penetration Testing

Our CREST-approved, fully customisable pen test engagements enable you to identify vulnerabilities and exposures in your infrastructure, applications, people and processes in order to reduce security risk.

What our customers say

BLOG

A Redscan investigation has revealed the extent of the problems facing organisations in the healthcare industry as they struggle to defend against increasingly sophisticated cyber threats.   With …

Case Study

After being infected by an aggressive form of malware, a private healthcare organisation leveraged support from Redscan’s ThreatDetect™ EDR service to help eliminate it quickly and effectively.

We use cookies for security, to optimise your browsing experience and anonymously analyse site traffic.
Accepting necessary cookies is required to provide you with a minimum level of service. Learn more