製造業界はサイバーレジリエントなのか？ | Kyndryl

1. Identify the minimum viable company 

For manufacturers, the tolerance for operational downtime is very low and ensuring the business remains up and running is vital. It is critical to identify the assets that power the minimum viable company — or the bare necessities an organization needs to run critical business processes and the key systems and data that support them.

To be cyber resilient, manufacturing leaders must identify the most critical systems that are vital to operations. This could range from the systems that power the factory floor to the systems that power the supply chain required to obtain raw goods. These assets need to be protected at all costs. Additionally, it’s necessary to focus on time to recovery of the assets and determine the minimum amount of downtime that can be allowed for recovery systems to do the job. Once these foundational principles are determined, manufacturers can partner with experts to apply the right resiliency principles to the enterprise, such that the data and systems are always available and can be recovered reliably within the mean time to recovery.

3. Conduct third-party risk management assessments

The manufacturing sector has a complex partner ecosystem that poses several potential cyber and compliance risks. If a third-party vendor can no longer supply critical inputs needed to produce goods by the manufacturers, operations could halt. The business could also be significantly impacted. It’s crucial to align the vendor risk-management strategy with the business objectives and consistently update the risk register and risk reporting. Have a map of the dependencies of third parties, as well as plans to obtain the necessary inputs if and when those third parties cannot provide the input.