Skip to content
FNLY IT

Keeping production and warehouses running

When IT stops, production stops.

In manufacturing, small-batch production and logistics, every hour of downtime has a price in euros. At the same time, customers increasingly ask their suppliers for evidence of IT security. We make sure your office and production networks are cleanly separated and that you can provide the evidence your customers ask for.

The situation

Downtime costs by the hour, not by the incident.

In the office an outage is annoying. In production it has a price in euros. That changes how you plan maintenance windows and design redundancy.

Machine controls age differently from office PCs.

Equipment runs for fifteen years, and its controls often run on operating systems that have not had updates for years. Such systems cannot simply be updated, so they have to be separated from the rest of the network and secured on their own.

Requirements come through the supply chain.

Suppliers to the automotive industry know TISAX, and suppliers to aerospace or medical technology know supplier questionnaires. NIS2 also requires affected companies to take the security of their supply chain into account. That is why the questions also reach suppliers who do not fall under NIS2 themselves.

Warehouses and shipping do not keep office hours.

Scanners, warehouse management and shipping systems run in shifts, often with changing staff and temporary workers. IT support that is only available from 8:00 to 17:00 does not suit an operation that starts up its equipment at 4:00.

  • Separation of office and production networks, the single most effective measure against an incident spreading
  • Securing legacy systems that cannot be replaced
  • Permission concepts across several sites, including international ones
  • Identity processes for shift staff and temporary workers, so access is created on time and removed again
  • NIS2 implementation and supplier questionnaires: the technical side and the evidence
  • Recertification that business units can actually carry out in daily work
  • Setting up new sites, relocations and consolidations with a planned process
  • Maintenance windows at night and at weekends, aligned with your shift schedules

What we do not take on: programming and maintaining machine controls. That stays with the equipment manufacturer, and we make sure network and access are secure.

Case studies

Industrial supplier, international · 2,000 users

Introduction of an IAM solution, a clean-up of file storage and a password reset that employees can carry out themselves.

Result: Password tickets fell from almost 300 to 10 per week.

Logistics, international · 10,000+ users

Replacement of the previous IAM structure and introduction of a new solution, together with an external service provider.

Result: The helpdesk handles requests faster because it has extended permissions. Identity processes run automatically, based on cleaned-up HR master data.

FAQ

Frequently asked questions

Do manufacturing companies fall under NIS2?

Some of them do, because several areas of manufacturing are among the sectors covered by the directive, for example machinery, motor vehicles and electrical equipment. Whether you are affected also depends on headcount and turnover. Our NIS2 check gives you an initial assessment. The binding assessment is a legal question.

Are logistics companies affected by NIS2?

That depends on exactly what you do. Transport as well as postal and courier services are among the sectors covered, but many logistics providers are reached by NIS2 mainly through their customers. Our NIS2 check is the first step.

Our customer is asking for NIS2 evidence. What do we need to do?

First we clarify exactly which points your customer is asking about, because the questionnaires differ. They usually cover access control, MFA, backup, patch management and incident handling. We review your status in a gap analysis and provide the evidence you can present to your customer.

Do you also look after machine controls?

The network and access side, yes. The controls themselves stay with the equipment manufacturer. We connect them so that they do not become an entry point for attackers.

What does network separation really achieve?

It stops an incident from spreading, but it does not prevent the incident itself. Many production outages after an attack happen because malware spread from the office network into production.

We have received a TISAX questionnaire. Can you help?

With the technical side, yes: access control, logging, backup and documentation. The assessment itself is carried out by an auditor.

Can you work outside business hours?

Yes. Maintenance windows in production and warehouses fall at night or at weekends, and we plan for that from the outset. Services included in your package's service level carry no surcharges, and in the Complete package you can reach us around the clock.

Manufacturing & Logistics

How do things look in your production?

Tell us where things are stuck, whether in production, in the warehouse or with the next customer questionnaire. We will tell you honestly whether and how we can help.