Manufacturing cybersecurity shifts from IT concern to operational business risk

Recent industry reports from Make UK, Kaspersky, and VDC Strategy highlight that cybersecurity in manufacturing has transitioned from a technical IT concern to a critical business and operational risk. As 60% of manufacturers aim for full digitalization within two years, the integration of shop-floor equipment with digital platforms is creating cyber-physical systems where digital disruptions can directly halt physical production.

Data from Make UK indicates that while 70% of manufacturers reported no cyber incidents affecting operations in the previous year, 10% experienced incidents with direct financial or business impacts. The report emphasizes that cyber resilience must be treated as an operational requirement, involving departments such as engineering, maintenance, and health and safety, particularly when unauthorized configuration changes could create hazardous physical situations.

Drivers for this digital transformation include improving production efficiency (24%) and reducing operational expenses (15%). However, the connectivity required for these gains—including IIoT sensors and automated material handling—increases exposure to ransomware targeting Enterprise Resource Planning (ERP) and Manufacturing Execution Systems (MES).