The advent of AI in manufacturing has brought about many efficiency gains and benefits such as better ROI for their operations, which includes increased uptime performance and efficiency.
But AI also has opened manufacturing systems (especially OT that wasn’t made to be networked but now is in many places) to a much larger threat landscape.
More came from Tim and Kiteworks’ just-released AI Data Security and Compliance report:
- 83% of organizations lack basic AI security controls.
- Only 17% of the surveyed organizations have technical safeguards.
- 26% admit that more than 30% of data sent through AI tools contains private information—trade secrets, designs, and customer data. The industry relies dangerously on employee training over technology for its cybersecurity.
Tim added that the AI security gap in manufacturing has created the “perfect storm” for cyber risk.
e-handbook: Cybersecurity
While manufacturers are ahead of other industries in implementing hard controls (27% block public AI versus 17% overall), he contributed, the convergence of three factors creates unprecedented risk:
- 83% of organizations still lack basic AI security controls.
- Manufacturing remains the No. 1 ransomware target at 21% of all attacks.
- Nearly half of manufacturers (49%) are rushing to adopt AI for cybersecurity itself.
This rapid adoption without proper safeguards, he said, is like “building a fortress with an open drawbridge”—especially concerning when 26% admit that over 30% of data flowing through AI tools contains critical IP like trade secrets and designs.
See also: AI sparks demand for specialized, high-performance plant infrastructure
Carolyn noted that manufacturing is adopting AI to drive efficiency, which also means more systems—especially OT—are being connected in ways they weren’t originally designed for.
She added in materials prior to the webinar: “The big issue with cyber data is that analytics and AI are essentially add-ons. The data is not ready for AI and there is not really a vendor-agnostic proper AI platform for cyber data. There are logging appliances, but they only do what they are programmed to do.”
See also: Patchwork of tech, siloed staff plantwide can make for cybersecurity nightmares
She also noted that OT systems were designed for uptime and performance—not for connectivity or cybersecurity. As manufacturers start layering in AI and cloud technologies, they’re exposing systems that were never intended to be networked. That makes them attractive to attackers looking for easy entry points and maximum disruption.