Global OT Cyber Transformation Following a Major Cyber IncidentFollowing a major cyber incident, a global manufacturing organisation needed to strengthen the cyber resilience of its Operational Technology environment across more than 50 manufacturing sites spanning Europe, North America, South America and Asia. The challenge required coordinated remediation and transformation across OT, Engineering, Manufacturing, Infrastructure and Information Security while minimising disruption to manufacturing operations.
The Situation
Following a major cyber incident, a global manufacturing organisation needed to strengthen the cyber resilience of its Operational Technology environment across more than 50 manufacturing sites spanning Europe, North America, South America and Asia. The challenge required coordinated remediation and transformation across OT, Engineering, Manufacturing, Infrastructure and Information Security while minimising disruption to manufacturing operations.
The Task
Take ownership of a complex global OT cyber remediation and transformation programme spanning 50+ manufacturing sites, establish effective governance and delivery control, and coordinate security improvements across OT, Engineering, Manufacturing, Infrastructure and Information Security while minimising disruption to manufacturing operations.
The Action / Approach
I established the governance and delivery structure required to turn a complex global cyber remediation programme into an executable portfolio. I introduced Jira and Confluence for standardised programme management, executive KPI reporting and delivery transparency, and established an Executive Cyber Security Steering Committee providing strategic oversight to the ExCo, CIO and CISO.
I directed cross-functional delivery across OT, Engineering, Manufacturing, Infrastructure, Information Security and strategic suppliers. This included global OT network segmentation, Microsoft Defender for IoT deployment and Sentinel integration, vulnerability remediation, Red Team/Blue Team remediation, SOC procurement and onboarding, and structured ServiceNow remediation workflows.
I also drove the transition from programme delivery into sustainable operational capability, ensuring security improvements could be governed, monitored and supported beyond initial implementation.
The Result
The programme delivered measurable improvement across the global OT estate. Phase 1 monitoring reached 90% of sites, covering approximately 9,000 devices, while a revised licensing model generated €81k in savings. Protection was established across 87% of high-risk, 100% of medium-risk and 89% of low-risk sites.
Delivery also established monitoring across 200+ OT VLANs, with 100% of deployed sensors monitored through Zabbix. The programme identified 1,024 weak firewall rules and began systematic remediation, alongside the wider strengthening of network segmentation, monitoring and operational security controls.
These outcomes moved the programme beyond technology deployment towards a measurable, governed and operationalised OT cyber capability.
