For surveying businesses, technology is now central to almost every stage of the job. From digital records and cloud-based systems to GPS equipment, client data, email communications and online project management, modern surveying practices rely heavily on connected technology.
That connectivity also creates new risks.
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) received more than 42,500 calls to its Cyber Security Hotline during 2024–25, an increase of 16% from the previous year. The average self-reported cost of a cybercrime incident for Australian small businesses was also $56,600, highlighting that cyber incidents can create a significant financial impact even for smaller organisations. Cyber Security Australia
For surveying practices, the potential consequences extend beyond simply losing access to a computer or system.
Why surveyors are increasingly exposed to cyber risk
Surveying businesses can hold a wide range of valuable information, including:
- Client contact and business information
- Property and development data
- Financial and payment information
- Survey plans and project documentation
- Employee records
- Passwords and account credentials
- Data stored through cloud-based platforms
A cyber incident affecting any of these systems could interrupt normal operations and potentially result in financial loss, data exposure or reputational damage.
The growing use of digital technology also means that cyber risk isn’t necessarily limited to large organisations. Small and medium-sized businesses are increasingly being considered viable targets because they may have fewer resources dedicated to cybersecurity.
The Australian Government established a parliamentary inquiry into cybersecurity for small and medium-sized businesses in 2026, including consideration of cyber maturity, access to cybersecurity services and the importance of employee training. Australian Parliament House
Common risks businesses should consider
Cyber threats can take many forms, and they don’t always involve highly sophisticated hacking.
Phishing and compromised accounts
A convincing email can be enough to give an attacker access to an employee’s account or encourage someone to transfer money to an incorrect account.
Businesses should encourage staff to carefully check unexpected requests, particularly those involving payments, passwords or sensitive information.
Ransomware
Ransomware can prevent businesses from accessing important files and systems until the incident is contained and systems are restored.
For a surveying business, an extended interruption could affect the ability to access project information, communicate with clients or continue scheduled work.
Data breaches
Businesses need to consider not only how they protect their own information, but also the personal and commercial information entrusted to them by clients and other parties.
A data breach can create costs associated with investigating the incident, responding to affected parties and restoring systems.
Third-party and cloud-based systems
Surveying businesses increasingly rely on external software, cloud storage and other technology providers.
While these platforms can improve efficiency and collaboration, businesses should understand what information is being stored, who can access it and what happens if the service becomes unavailable.
Five simple ways to strengthen your cyber resilience
Cyber insurance shouldn’t be viewed as a substitute for good cybersecurity practices. Businesses can take practical steps to reduce their exposure.
1. Use multi-factor authentication
Enable MFA wherever it is available, particularly for email, cloud storage and systems containing sensitive information.
2. Keep software and devices updated
Security updates can address known vulnerabilities, so operating systems, applications and devices should be kept up to date.
3. Back up important information
Maintain appropriate backups of critical business information and ensure backups are protected from unauthorised access.
4. Train your team
Employees are an important part of a business’s cyber defences. Regular training can help staff recognise suspicious emails, links and requests.
5. Have an incident response plan
Know who should be contacted and what steps should be taken if a cyber incident occurs. Having a plan before an incident happens can help reduce confusion and disruption.
Where cyber insurance fits in
Even with strong preventative measures, no business can completely eliminate cyber risk.
Cyber insurance can provide another layer of protection by helping businesses respond to the financial and operational consequences of a cyber incident.
Depending on the policy, cover may assist with areas such as data recovery, business interruption, response costs and liability arising from a data breach.
For surveying businesses, the right cover should reflect the way the business actually operates, the technology it relies on and the information it holds.
At ACSIS, Cyber Insurance is designed specifically with surveying businesses in mind, providing protection against financial loss, data breaches and disruption, along with access to breach response support and cyber risk resources. ACSIS
Don’t wait for an incident to review your cyber risk
Cybersecurity is no longer simply an IT issue. For professional businesses that depend on digital systems and client information, it is an important part of broader business risk management.
Taking time now to review your systems, educate your team, check your backups and understand your insurance cover can help your business be better prepared if something does go wrong.
Want to know more about protecting your surveying business?
Speak with the ACSIS team or your insurance broker to discuss your business’s cyber risks and whether your current insurance arrangements provide the protection you need