Automotive and EV manufacturers operate highly automated just-in-time lines where a cyber incident immediately halts assembly and cascades through the global supply chain. TISAX is mandatory for the automotive supply chain when supplying parts to major OEMs. Aerospace supply chains must meet AS9100 with security controls and DEFSTAN 05-138 for MOD suppliers. CAD/CAM systems (SolidWorks, AutoCAD, CATIA) and PLM platforms (Siemens Teamcenter, PTC Windchill) holding proprietary designs require assessment. CNC machine code manipulation affects product quality and structural safety. Nation-state IP theft targeting UK aerospace and defence supply chains is a persistent NCSC concern.

Food and beverage is the UK's largest manufacturing sub-sector by employment, operating highly regulated environments where cyber threats to refrigeration, mixing, and batch OT systems cause spoilage, product recalls, and severe financial loss. Chemical and process sites across Teesside and Humber run DCS and safety-critical systems classified as major hazard sites under COMAH where a breach can trigger environmental disaster. BRCGS and SALSA accreditation includes supply chain security. A cyber attack causing an environmental spill or safety incident triggers HSE prosecution, not just ICO fines.

Electronics and semiconductor manufacturing involves highly sensitive IP and cleanroom automation. Precision engineering firms creating bespoke high-value components often lack internal cyber resource but hold extremely valuable CAD/CAM designs. Additive manufacturing file manipulation alters structural properties of printed components with safety implications. Digital twin environments and Bill of Materials data carry IP theft risk. High-Value Manufacturing Catapult centres hold pre-commercial IP at vulnerable stages. Steel and advanced materials producers run heavy industrial OT with decades-old machinery connected to modern analytics.

SCADA, DCS, PLCs, RTUs, and HMIs control core production processes. The Purdue Model provides the reference architecture for segmenting corporate IT from shop floor OT, and we validate this segmentation. MES bridges ERP and production. Industrial robotics and AGVs require assessment. IIoT sensors feed data into cloud analytics but often lack encryption. Native protocols including Modbus and Profinet lack built-in encryption, making them susceptible to manipulation. Historian servers, QMS, CMMS, CNC machines, 3D printing systems, and ERP-to-shop-floor middleware all require review.

ERP systems (SAP, Oracle, Microsoft Dynamics) manage production planning, procurement, and financials. Attacking ERP blinds the factory to orders and inventory, forcing physical shutdown even if OT is untouched. Cloud platforms for analytics, predictive maintenance, and demand forecasting. Digital twin environments for product simulation. Remote access and VPN connecting multiple sites. Supplier portals and EDI systems for supply chain coordination. Equipment OEM remote maintenance access creating persistent backdoor risk.

Tier 2/3 suppliers are frequently used as stepping stones by nation-state actors to breach larger tier 1 OEMs. Equipment vendor firmware and software updates must be validated before deployment. HVAC engineers and robotics maintenance teams with unsecured VPN access to factory floors represent direct entry vectors. USB and removable media controls for shop floor and air-gapped OT are critical where well-meaning engineers plug devices directly into HMIs. Contractor and agency worker access management across sites. Concentration risk where multiple manufacturers share the same critical component suppliers.