How security differs in this industry
These scenarios model Meridian Space & Robotics precision avionics and propulsion manufacturing cells using general engineering and NIST OT segmentation practices; aerospace, medical, automotive, and defense contracts impose additional quality and regulatory mandates.
Uptime without specification integrity produces scrap or hazards
A 5-axis CNC mill or additive manufacturing cell can report 100% availability while machining components with subtle dimensional flaws caused by an unauthorized toolpath or recipe modification. Manufacturing security must protect the integrity and provenance of CAD drawings, G-code recipes, and metrology records alongside machine availability.
Shop-floor segmentation must respect real process flows
Manufacturing execution systems (MES), historians, engineering workstations, and CNC controllers exchange time-sensitive production data. Network segmentation reduces lateral movement blast radius, but firewall rules must be derived from verified data-flow maps and tested during planned maintenance windows.
Production recovery requires quality assurance sign-off
Restoring a failed machine controller from backup gets the spindle turning, but does not prove the cell is producing conforming parts. Resuming production requires coordinated sign-off across maintenance, production engineering, and quality assurance, backed by first-article inspection and batch traceability.
How to use this path
Read each situation, inspect the synthetic evidence, and choose a response. Every answer explains its tradeoffs. Follow the linked foundation lessons when you need a concept explained, then mark the decision practiced when you are ready.
All organizations, people, events, and evidence in these exercises are fictional. The controls stay in the browser.
APPLIED LESSON 1 / 7 MIN
Verify machine recipe provenance and authorization
Distinguish an authentic supplier support file from an engineering-approved production baseline.
At Meridian's thruster nozzle machining cell, a technician receives an updated CNC toolpath recipe attached to a legitimate vendor support ticket. Although the filename matches Meridian's naming convention, the file header specifies Recipe Version 13, whereas today's production traveler for Part P-8 explicitly mandates Recipe Version 12. Propulsion Lead Priya Nair emphasizes that a valid vendor ticket proves only where the file came from, not that Version 13 has passed metallurgical stress validation or quality sign-off for flight hardware. The protected asset is the coupling between the cryptographic digest of the recipe, the engineering specification it implements, and the formal production release authorization.
The analyst quarantines the inbound file in staging and compares its SHA-256 digest and parameter table against Meridian's Product Lifecycle Management (PLM) repository without loading it onto the CNC controller. Production engineering and quality assurance review the discrepancy against the active traveler and tolerance limits. Because Version 13 has not completed first-article qualification, the cell continues running the verified Version 12 baseline, and every manufactured serial number remains cryptographically bound to the exact recipe digest used during machining.
How should the manufacturing and security teams handle the Version 13 recipe file?
CONNECT TO THE FUNDAMENTALS
APPLIED LESSON 2 / 7 MIN
Segment supplier maintenance access by verified data flows
Map shop-floor communication dependencies before tightening network segmentation boundaries.
During an architecture review of Meridian's composite layup facility, Kael Cho discovers that an autoclave vendor's remote maintenance tunnel can reach not only the autoclave diagnostic service (D-4), but also the central CAD/CAM file server and corporate SMB shares. While narrowing this overly broad network reach is essential to contain lateral movement, Vera Vance warns against pushing an immediate, untested deny-all ACL during an active curing cycle: undocumented service dependencies between the diagnostic daemon and an engineering license or calibration share could abort a live production run.
Following the six-step segmentation methodology in NIST CSWP 28, the team first maps the exact asset inventory, protocol flows, service identities, and maintenance windows required by service D-4. Engineering and maintenance validate the restricted firewall policy in a staging cell, confirming that D-4 diagnostics succeed while lateral connections to CAD/CAM and corporate shares are blocked and logged. The verified segmentation rule is then deployed during a scheduled maintenance window with a documented rollback plan.
Which engineering approach reduces the vendor's lateral movement blast radius without risking an unplanned production abort?
CONNECT TO THE FUNDAMENTALS
APPLIED LESSON 3 / 7 MIN
Restore production with a formal quality release gate
Require baseline reconciliation and quality assurance sign-off before releasing a recovered manufacturing cell to production.
After a solid-state drive failure on an avionics surface-mount technology (SMT) placement workstation, Kael Cho restores the host from last week's disk image. The workstation boots cleanly and the pick-and-place gantry initializes without error codes, but the restored local library predates Drawing Revision C, which updated component orientation for a power regulator board forty-eight hours ago. A successful OS boot proves only that the workstation hardware recovered; resuming assembly with an obsolete revision library would manufacture defective avionics boards that appear healthy to automated optical checks configured for the old revision.
Before the cell resumes scheduled manufacturing, production engineering, maintenance, and quality assurance execute a formal return-to-service protocol. They reconcile the workstation's restored CAD/CAM library, feeder calibration tables, and firmware hashes against the current master PLM baseline, pulling the approved Drawing Revision C package. For any boards assembled while configuration state was uncertain, quality assurance places the lot in quarantine pending X-ray and functional verification. Recovery is declared complete only when all three owners sign the release traveller.
What is required before the recovered SMT workstation is authorized to resume scheduled avionics assembly?
CONNECT TO THE FUNDAMENTALS
Standards & scope
These are signposts for further study. The examples use U.S. regulatory context where noted; applicability depends on your organization, jurisdiction, services, and data.
NIST SP 800-82 Rev. 3 ↗
OT security guidance addresses safety, reliability, and performance as well as information security; use production-approved procedures for operational changes.
NIST CSWP 28: manufacturing segmentation ↗
Final practical guidance presents a six-step approach to segmentation in a small manufacturing environment based on assets and communication requirements.