Most construction projects keep their entire record in a single CDE, which makes that platform a single point of failure. If it is encrypted by ransomware, taken offline by an outage or locked during a contract dispute, every team that depends on it stops at once. Cyber resilience for a project means holding an independent copy of the record that you control, and having a way to keep working from it.
The risk is usually missing from the model
Project risk registers cover weather, supply chain, ground conditions and design change in detail. Losing the CDE rarely appears, even though drawings, approvals, RFIs and correspondence all run through it. When it does go down, design stops, document control stops and site teams wait for instructions.
The industry has already seen this. In 2020 Bouygues Construction was hit by the Maze ransomware attack and had to shut down its systems. Any project whose record lived only in the affected systems had nothing independent to restore from.
What a vendor backup covers
CDE vendors run their own backups, and they are an important part of the picture. Their purpose is to restore the vendor's platform on the vendor's timetable. They give the project no copy of its own, and they cannot help when the issue is a compromised account, a lapsed licence or a commercial dispute with the vendor.
What resilience looks like
A resilient setup has three properties. The copy is independent of the CDE, held in infrastructure the project owner controls. It is complete, carrying versions, folders and metadata along with the files. It is current, refreshed often enough that the gap between the live platform and the copy stays small.
CDE Backup™ is built around those three properties. It copies files, every version and the metadata from your CDE into your own Azure tenancy on a schedule you set, in the data region you choose. Utopia Digital never stores the files, which stream straight from the CDE into your storage.
Recovering and continuing
When an incident happens, the copy in your Azure gives you two options. You can restore project data into the platform once it is back. You can also stand the record up in another platform and keep working, using CDE Migrate™ to move the backed-up projects across with their structure and metadata intact.
Security requirements on critical infrastructure
Projects in rail, energy, water, aviation and defence often carry obligations under the Security of Critical Infrastructure (SOCI) Act or similar regimes. Those obligations make it hard to justify copying files through desktops, scripts or unvetted tools. CDE Backup™ runs on zero-persistence infrastructure with encryption in transit, and Utopia Digital holds SOC 2 Type II and Cyber Essentials, with independent penetration testing each year.
Resilience as part of the Utopiaverse™
In the Utopiaverse™, the backup copy does more than sit in reserve. It forms part of the connected record in your Azure, alongside data from CDE Sync™, CDE Migrate™ and CDE Archive™. AI Insights can search and question that record, so the copy that protects the project during an incident is the same one your team uses to find information across projects day to day.