Manufacturing
North America + Mexico

Cobalt Industrial

Industrial OEM with eight plants, 3,000 employees, and a recently acquired IT/OT convergence program.

Systems
  • Plant-floor MES
  • OT segmented network
  • ERP
  • Remote vendor access for machine maintenance
Regulatory exposure
  • NERC CIP (limited plant scope)
  • OSHA recordkeeping
  • Mexico LFPDPPP (privacy)
Relevant frameworks
  • NIST CSF
  • IEC 62443 (OT)
Top risks
  • OT ransomware
  • Remote vendor access exposure
  • Phishing of plant staff
  • IT/OT segmentation gaps
Control priorities
  • IT/OT segmentation verification
  • Vendor jump-host controls
  • Plant-floor backup posture
  • OT patch cadence
Audit concerns
  • OT segmentation evidence
  • Vendor remote-access logs
Your task
You inherited an OT security program in its first year. Write the 12-month roadmap that justifies the spend to the plant managers — they do not care about frameworks, only uptime.
Vendor risk
High: machine-vendor remote access is the most common initial access vector.
BCP/DR
Plant-floor failover largely unknown; HQ can fail over, plants cannot.