UK manufacturers found to be facing extensive cyber threats

Cyber attacks are no longer just an IT issue for manufacturers. They are disrupting production lines, increasing costs and putting customer deliveries at risk.

Make UK’s latest report, Cyber Security in Manufacturing, reveals the scale of cyber risk facing UK manufacturers and sets out the practical steps businesses can take to strengthen resilience.

Cyber risk is business risk

As factories become more connected, a digital weakness can quickly become a production problem. From supplier disruption to operational downtime, cyber incidents are now affecting the everyday performance of manufacturing businesses.

The key findings of the report show that 30% of manufacturers experienced a cyber incident in the past year, either directly or through their supply chain. Production downtime and increased operational costs were the most common impacts where incidents caused disruption. Thirty-one percent of manufacturers affected by supplier cyber attacks reported delays to customer deliveries, whilst almost a third of firms either do not have cyber insurance or are unsure whether they are covered and only around half have incident response plans in place.

What manufacturers need to do next

The report calls on manufacturers to treat cyber security as a board-level priority, strengthen basic cyber hygiene, improve supplier assurance and make sure recovery plans are tested before disruption hits.

Graeme Gordon, CEO of Converged Solutions Group, said: “This survey highlights the volume of attacks UK manufacturers face and the damage these incidents often cause to their operations, particularly when they are not prepared.

“Given the publicity the attack on JLR received last year, it’s surprising and concerning so few manufacturers have incident response plans in place, especially given the benefits they offer in reducing downtime and financial losses.

“With a regularly rehearsed incident response plan in place, manufacturers can recover from attacks in hours rather than months, often without pulling down production lines at all. These plans must lay out all the scenarios that could impact manufacturers and detail how the manufacturer would respond both technically and operationally.

“The key is to ensure that when an incident occurs, the response is not being developed in the middle of a crisis. Preparation, clear responsibilities and regular testing can make the difference between a contained incident and prolonged disruption to production.”

Cyber Security in Manufacturing aims to further understanding of the latest risks and identify practical steps to protect people, production and supply chains.