Answer these 20 yes/no questions to see how ready your renewable energy business's technology is. They cover strategy, site connectivity, field teams, cyber security, collaboration and AI. If you answer "no" to three or more, there are likely to be quick wins. If you answer "no" to any cyber security question, start there, because those gaps carry the most risk and are often what developers and utilities check first.
Strategy
- Do we have a documented technology roadmap linked to our project pipeline?
- Has our technology been reviewed in the last 12 months?
- Do we know every supplier, contract and renewal date for IT, connectivity and mobiles?
Site connectivity
- Do we check coverage at the exact location before connecting a new site?
- Can we get a new site online within a week?
- Do sites that can't be left offline have automatic failover?
- Is every site connection monitored, with someone responsible for chasing faults?
Field teams
- Are all business phones and tablets centrally managed, and can we wipe a lost one remotely?
- Are our field teams on the network with the best coverage at our sites?
- Do we have a tested way to stay in touch with lone workers?
Cyber security
- Is multi-factor authentication enabled for every user, including on monitoring portals?
- Does every person have their own login, with no shared accounts?
- Are office IT and site control systems on separate networks?
- Do we know which third parties can connect to our site systems, and how?
- Are our backups tested?
- Do we hold Cyber Essentials, or have a date to achieve it?
- Do staff get cyber awareness training at least once a year?
Collaboration
- Does every project have one secure home for its documents, with controlled sharing for partners?
Artificial intelligence
- Have we identified where AI could save time on reports and admin?
- Do we have an AI acceptable use policy?
How to score it
- 18–20 "yes": you're in good shape. Review again in a year or when your pipeline changes.
- 13–17 "yes": solid foundations with some gaps. Fix any cyber security "no" first.
- 12 or fewer "yes": a structured review will show where to start.
Frequently asked questions
Which questions matter most?
The cyber security questions, particularly multi-factor authentication, shared accounts and network separation. These are the gaps attackers use most, and they're the controls developers and utilities check in supplier questionnaires. Only 47% of UK businesses use two-factor authentication (DSIT, April 2026), so this is often the quickest win.
How often should we repeat the checklist?
Once a year, and whenever you start a significantly larger project, open a new office or take on a client with new supply chain requirements. The answers change as the business grows.
How Indigo does this. Our free Renewable Energy Technology Assessment covers all six areas of this checklist. Indigo Unified Communications reviews your current IT setup, cyber security, connectivity for offices and sites, Microsoft 365, business continuity, mobiles and field workforce, and your technology roadmap, then gives you a prioritised list of risks and quick wins. We're based in Glasgow and hold Cyber Essentials Plus and ISO 27001:2022.
Sources: DSIT, Cyber Security Breaches Survey 2025/2026, 30 April 2026, https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026 · NCSC and partners, Secure Connectivity Principles for Operational Technology (OT), January 2026, https://www.ncsc.gov.uk/files/ncsc-secure-connectivity-for-operational-technology.pdf · HSE, Lone working: training, supervision and monitoring, https://www.hse.gov.uk/lone-working/employer/training-supervision-monitoring.htm
Chapter 8 of 8 · All chapters
Get a free technology assessment
One of our consultants will review your IT, security, connectivity and phones, then give you practical recommendations. No obligation.