mobile image

Establishing industrial cybersecurity governance from leadership to shop floor

Industrial cyber security takes care of securing the production process with the equipment and systems used against cyberthreats. Specifications, processes, practices and technologies are used to detect, defend against and deal with cyberattacks and other unwanted activities. This includes the protection of components, networks and data as well as the establishment and compliance with processes and organizational requirements. team, consisting of nine people, is giving support by providing advice, ensuring transparency about risks in the group, developing blueprints and solutions for the shop floor and promoting the transfer of knowledge between all stakeholders on information security issues in production. A “group regulation” implemented in 2022 demonstrates Volkswagen’s cybersecurity governance mandate at the corporate level. All brands and locations of the Volkswagen Group are supported by an “Industrial Cyber Security Group Information Security Team” by defining and maintaining information security requirements on the shop floor. By conducting cybersecurity assessments in various plants all over the world, the maturity level is evaluated, to be continuously improved and reported to the top management in the information technology and production department. The “Production Information Security Officer”, as the person responsible for cybersecurity in each plant, is a key interface to the cybersecurity team. This role is constantly evolving through learning paths and mandates with competencies and responsibilities.

Year published
29 April 2024
Organization involved
Avatar Image
Volkswagen Group