Case Study: Building a Mature OT Cybersecurity Program for a Multi-Site Manufacturer
From Foundational Standards to Ongoing OT Cybersecurity as a Service
A large manufacturing client engaged UTSI, along with our partner, to strengthen the security, governance, and resilience of its operational technology (OT) environments. What began as an architecture standard for a single facility grew into a multi-year advisory partnership. Each phase built on the last, moving client from defining cybersecurity standards to making OT security part of everyday operational and strategic decisions.
Problem
Client needed a consistent, scalable way to secure OT across multiple facilities. Key challenges included:
No standardized baseline: Client had no formal OT network architecture standard to guide secure design at its facilities.
Inconsistent governance: Without a common framework, it was difficult to apply cybersecurity best practices consistently across divisions.
New technology demands: Deploying OT security monitoring tools which require expert validation to meet security objectives and operational best practices.
Specialized expertise: Client needed ongoing access to OT cybersecurity knowledge as new initiatives and requirements emerged.
Solution
UTSI delivered a phased roadmap in which each engagement addressed a specific objective while building on previous work:
OT architecture standard (January 2025): Provided recommendations for a standardized OT network cybersecurity architecture for their facility. It incorporates NIST, IEC 62443, and NERC CIP guidance into a repeatable design baseline.
Enterprise best-practice advisory (June 2025): Expanded to security architecture reviews and expert guidance across divisions, to facilitate the adoption of standards enterprise wide.
Technology-specific advisory (2026): Supporting deployment of Nozomi and related OT security monitoring technologies, validating architecture, monitoring, and operational security practices.
Ongoing advisory support: Providing recurring access to OT cybersecurity expertise for architecture reviews, technology deployments, and emerging security requirements.
Results
- OT Cybersecurity Governance: Established a consistent approach for applying cybersecurity standards and best practices across facilities.
- Improved visibility: Ongoing expert validation of monitoring technology is helping strengthen operational visibility and support more informed risk management.
- Security as an ongoing function: OT cybersecurity moved from one-time projects to a sustained part of operational and strategic decision-making, and staff development.