Small manufacturers are big targets of cyber attacks. Cyber criminals are seeking your information including employee and customer records, banking and financial data, and access to larger networks. Small manufacturers are often seen as an easy entry point into larger businesses and government agencies. With limited resources and budgets, small manufacturers need cybersecurity guidance, solutions, and training that is practical, actionable, cost-effective and helps manage their cybersecurity risks. Missouri Enterprise is the NIST Manufacturing Extension Partnership (MEP) organization for the State of Missouri, and is eminently qualified to support cybersecurity resilience for your manufacturing company as well as help you achieve compliance if you are a Department of Defense supplier.
Cybersecurity protects the confidentiality, integrity and availability of your information. A cybersecurity program provides advantages for small and mid-sized manufacturers:
- Improve Recovery Mitigate Risks Times After Disruptions
- Avoid Potential Losses
- Protect Valuable Data
- Protect Valuable Data
- Mitigate Risks
Reality of Cyber Attacks and Breaches:
*61% of small businesses have experienced a cyber attack in the past 12 months.
*58% of cyber crime victims are identified as small businesses.
*34% of all documented attacks targeted manufacturers.
*$60K is the median cost of a data breach.
CASE STUDY: A Premier Crane Builder Suffers Cyber Attack
A Veteran Owned Small Business, Cincinnati Crane & Hoist is committed to producing and distributing the finest American made cranes the market has to offer. But in 2017, the company suffered a cyber attack through a spearfishing campaign. "I will never forget the feeling I got in the pit of my stomach when I received that call...", said President and CEO Tony Strobl. Click on the image below to learn more about their story (VIDEO) and how our sister MEP in Ohio helped the company get back to business.
CASE STUDY: Transformer Company Transforms Into Hot Commodity -- Becoming Target for Cyber Scams
As Meramec Instrument Transformer Co. continued to grow, it was more frequently being targeted by phishing scams. It also experienced a few fraud attempts. One example was when the finance department received an email from CEO Nick Sanarazo asking them to wire $500K to another company. Read more...
Defense Suppliers: Compliance
Manufacturers in the DoD supply chain had until December 31, 2017 to be in compliance with new DFAR cybersecurity requirements. Still haven't fulfilled this requirement? Let us help! Reach out to your Area Business Manager to learn more.
Attend our upcoming Workshop on Nov. 7 and take steps to meet the federal requirement.
Enhance Your Data Protection Efforts
Whether you’re a manufacturer implementing a cybersecurity program, or a DoD supplier looking to achieve compliance, Missouri Enterprise and the MEP National Network can help you protect your manufacturing company from cyber predators. Download 5 Steps to Reduce Cyber Risks.
Register for our upcoming Webinar on March 6 at 1 p.m.: Combating Information Attacks in a 24/7 Business World.
Click on the image below to read more about how cybersecurity resilience strengthens U.S. manufacturing.
Cybersecurity Training, Scanning, and Planning for IT Staff
This four-hour workshop addresses needs specific to Network and Server Administrators (i.e. system configurations and vulnerabilities protection). Following the workshop, Missouri Enterprise will conduct an electronic network scan to identify areas of concern that will require remediation, and will be addressed in a confidential, written report.
Using both an assessment worksheet and the results of the network scan, Missouri Enterprise works with the client’s IT Department to develop an implementation/action plan that can be used to document cybersecurity enhancements to meet the security standards discussed below.
The standards companies should meet are outlined in a publication from the National Institute of Standards and Technology (NIST Special Publication 800-171) and fall into 14 categories with specific requirements in each. The categories that are explored thoroughly during the four-hour workshop are:
- Access Control
- Media Protection
- Awareness & Training
- Personnel Security
- Audit & Accountability
- Physical Protection
- Configuration Management
- Risk Assessment
- Identification & Authentication
- Security Assessment
- Incident Response
- System & Communications Protection
- Systems & Information Integrity
In-House Cybersecurity Training Workshop for General Staff
This one-hour workshop will enhance awareness of the need for cybersecurity and the primary steps everyone can take to make the business IT network as secure as possible. These topics will include: Establishing a "Human Firewall,” Physical Security, Password Security, and Email Security Awareness Training.
For more information or for a complimentary consultation to review your needs and provide innovative solutions for your business, contact your Missouri Enterprise Area Business Manager.