Skip to content
Sector: manufacturing & industry

The line is running. Your network must not get in the way.

In a manufacturing company every hour of downtime immediately costs output, deliveries and trust. We set up your IT so that the office, machines and systems do not interfere with each other, and so that you know in advance what happens if something does fail.

Technician working on a machine
Office and machines

One network for everything, or office and production separated

In many companies the office and the shop floor have grown together: laptops, control PCs and cameras on the same network. This is what it looks like when each gets its own zone.

Office laptops, control PCs and cameras on one flat network
Office and production in separate zones, with a firewall that only allows what ERP and MES need
An infected laptop in the office can reach all the way to the machine
An incident in the office stays in the office, and the line keeps running
Machine suppliers with their own modem or a connection that is always open
Remote access through one secure route, only open when needed and logged
A control PC with an outdated operating system that nobody dares to touch
Legacy systems in a shielded zone, with only the traffic they need
How we work

Four agreements for IT alongside a production line

No promises in figures, but principles we agree with you in advance.

2

Two zones, one controlled gateway

Office and production on separate networks. Between the two, only the connections that orders and production figures really need.

0

No changes during production

Updates and changes that could affect the line happen in agreed maintenance windows or during a planned stop.

1

One escalation path

Agreed in advance who decides on your side and who we notify. Through the service desk during office hours, through the emergency line outside them.

3-2-1

Recovery that has been tested

Backups following the 3-2-1 principle, with an agreed recovery target per system that we test during a planned stop.

Employee at a computer on a production floor

Office and shop floor, cleanly separated

Machines, PCs on the floor and the office network each get their own segment. That way a problem in one place does not bring the other to a halt.

The systems we build around

Your ERP, MES and machine suppliers remain responsible for their software and controls. We take care of the network, the security and the integrations between them, and we talk to them for you.

Office

  • ERP
  • Planning
  • Microsoft 365
  • File server
  • Quality documentation

Shop floor

  • MES
  • Control PCs and HMIs
  • Downtime and quality registration
  • Industrial wifi

Between the two

  • OT/IT separation
  • Managed firewall
  • Secure remote access for suppliers
  • API integrations with ERP and MES
  • Offline or immutable backup

NIS2 in plain language

NIS2 is the European directive on cybersecurity that Belgium has transposed into its own law. It places obligations on companies in certain sectors, including parts of manufacturing, around risk management, security and incident reporting.

Even if your company does not fall under it, it can still affect you: customers that are covered by NIS2 ask their suppliers how they protect their systems. Whether NIS2 applies to your company is explained by the Centre for Cybersecurity Belgium (CCB). We do not give legal advice, but we set up the technical measures that NIS2 and your customers ask for, such as segmentation, MFA, logging, tested recovery and a response plan, and we document them so you can show them.

Questions from manufacturers like you

It is one of the most effective measures against ransomware in production. An infection in the office then does not automatically reach the machines, and the other way round.

Talk to someone who knows what downtime costs.

We look at how your office and production are connected today and tell you what we would separate and secure first.