Manufacturing Security Program

Pharmaceutical Industry
Manufacturing Security Program
Basel, Switzerland

Brief :

The request from a global pharmaceutical company was to improve its cyber security posture in the production environment by implementing proper cybersecurity improvement methods and measures.

BxC was asked for supporting the whole assessment and implementation activities as a key advisor and partner of this major security improvement program. BxC was further asked to take a major leading role in the design of the program and in the coordination of the different cyber security improvement accross all sites.

Sites
50
Sites
Sites
28.000
Assets
Parallel Workstreams
14
Parallel Workstreams

Activities :

Strategic activities, organisation of work streams and detailed remediation activities for each of the sites and each of the domains are part of the daily BxC actvities.

STRATEGIC DESIGN OF CYBER IMPROVEMENT

STRATEGIC DESIGN OF CYBER IMPROVEMENT

BxC designed from the high-level planning to the detailed tasks the cyber improvement to be implemented in the next months and years (Anomaly Detection, Network Segmentation, etc.)

COORDINATION OF IMPLEMENTATION

COORDINATION OF IMPLEMENTATION

BxC coordinated the different stakeholders, both internals and externals, to achieve the best results in alignment with project requirements

COMMUNICATION, REPORTING AND AWARENESS

COMMUNICATION, REPORTING AND AWARENESS

BxC communicated the successes and challenges, and ensured reporting and awareness at all the level of the organization

results :

Since the initial involvement of BxC, several workstreams have been rolled out and successfully handed over to operations. Several successes can be listed:

Awareness of OT Security raised in about 50 sites worldwide

Awareness of OT Security raised in about 50 sites worldwide

6 workstreams successfully closed and handed over to operations

6 workstreams successfully closed and handed over to operations

8 workstreams in progress and currently managed by BxC

8 workstreams in progress and currently managed by BxC

Reduction of the overall risk based on the main recommendations of IEC 62443

Reduction of the overall risk based on the main recommendations of IEC 62443