Segregating OT and IT networks across four manufacturing plants

The challenge

Machine controllers, office laptops and vendor remote-access tools all shared one flat network. Any compromised endpoint could reach the shop floor.

What we built

We mapped every device, designed a zoned architecture with brokered vendor access, and executed the cutover plant by plant during planned maintenance windows with a tested rollback at each step.

The outcome

All four plants now run segmented networks with monitored crossings. The security assessment that started the programme closed 92% of its findings within the same quarter.