Cyber Security for Advanced Manufacturing & IN4.0
About this good practice
Problem Addressed:
Cyber security attacks and threats are increasing globally. A divide has now emerged between cyber-resilient organisations and those that are struggling, which is worsened by factors such as the threat landscape, geopolitical instability, macroeconomic trends, industry regulation and adoption of new technologies.
Industry 4.0 has revolutionized manufacturing through digitization and connectivity, leading to a cyber-physical system. This increasing connectedness of the manufacturing environment to both customers and suppliers, brings new, inherent cyber security risks for manufacturing companies, in particular SMEs and their supply chain, in both information technology (IT) and operational technology (OT) systems.
How Objectives are reached:
Cyber Security for Advanced Manufacturing (Cyber4AM) is an all-island, cross-cluster project, commenced in August 2023.The goal is to support manufacturing SMEs with their cyber security maturity as they digitalise their factories. On the other hand a market opportunity for cyber security companies to better understand the potential vulnerabilities and needs of the manufacturing sector as it progresses towards Industry 4.0.
Stakeholders: Cyber Ireland, NI Cyber, ATIM, IDEAM, Mega, Manufacturing NI, CONFIRM, IMR, Munster Technological University, Queens University Belfast and University Ulster.
Expert opinion
Resources needed
Cost of Cyber Security for Advanced Manufacturing (Cyber4AM) project:
Staff Cyber Ireland & NI Cyber €14.4k + in kind €19.2k, Consultancy Report €36k, Workshop €5k, Dissemination €4k, Cyber Maturity Analysis €9k, Cyber Capabilities Assessment €9k and Partnership Advisory €22.8k. Total costs €120k.
Evidence of success
Cyber4AM outputs:
• 20 Manufacturing SMEs’ cybersecurity maturity assessed.
• Cybersecurity solutions for firms + education and training needs identified North & South.
• 10 cyber security companies’ solutions and capabilities assessed for advanced manufacturing.
• Report published on impact of industry 4.0 on cybersecurity in manufacturing, including regulatory implications, challenges, attack methods.
• Workshop @ ISA Ireland Conference to present report and connect manufacturing & cyber firms
Potential for learning or transfer
The Cyber4AM project has been successful and is transferable as the process identifies strong implementable recommendations e.g.
Awareness and Training: The most common supports firms believe would help them is targeted training and awareness programs for manufacturing SMEs. Additionally specialised training & courses suitable for industry to enhance firms’ readiness for OT cyber-attacks is needed.
Standards and Regulations: firms require support to implement cybersecurity standards and frameworks such as ISO27001 and IEC 6244. Additionally, awareness raising and support around pending regulations such as NIS2.0 and Cyber Resilience Acts is required.
Comprehensive Cybersecurity Strategy: Firms need to integrate cybersecurity more comprehensively into their business strategies as part of their digitalization plan.
Cybersecurity and OEMs: Original Equipment Manufacturers (OEM) need to improve the assessment and communication of cyber-risk of their products with manufacturing clients.