Auto-parts manufacturer cleared its OEM security audit after full hardening.

The challenge

A ransomware attack at a peer supplier had rattled the industry, and the manufacturer's biggest OEM customer responded with a mandatory supplier security assessment. The company had no audit history, a flat network where office laptops could reach plant systems, and an aging supplier portal exposed to the internet.

Failing the OEM assessment wasn't an IT problem — it was a revenue problem. The contract required demonstrated remediation within one quarter.

The solution

We ran a full audit and penetration test across both plants' IT, the supplier portal, and cloud services, ranking findings by real-world risk. The exposed portal was patched and put behind hardened access; the network was segmented so plant systems, office IT, and guest access no longer shared one flat space.

A patching cadence, endpoint monitoring, and backup-recovery drills were put in place, and all 500 employees went through practical phishing training. We then compiled the evidence pack and sat alongside the client through the OEM's assessment.

• Full VAPT across two plants, supplier portal, and cloud services
• Network segmentation separating plant, office, and guest systems
• Patching cadence, endpoint monitoring, and tested backups
• Company-wide phishing training with measured results