When Cyber Meets Manufacturing: Strengthening Industrial Cybersecurity and Operational Resilience

How Manufacturers Are Battling Ransomware, Supply Chain Disruption, and OT Threats in the Race for Digital Transformation

Expert News, Trends, and Insights
Author: Keven Knight, CEO, Talion

Executive Summary:

Manufacturing is no longer just about machines, assembly lines, and supply logistics. As factories become smarter, more connected, and more reliant on digital systems, cyber threats have escalated from theoretical risks to imminent realities. From ransomware attacks shutting down production lines, to supply chain espionage, to OT/IT convergence vulnerabilities, manufacturers are facing an evolving threat landscape with high stakes. With all these risks, cybersecurity is now becoming business critical. With the rise of OT/IT convergence, smart factories, digital twins, and global supply chains, the threat landscape in manufacturing has intensified.

Key risks include; ransomware incidents, hardware/software Trojans, ICS/OT vulnerabilities, and vendor/supply chain compromise. Statistics show manufacturing accounts for over 20% of global cyberattacks in sectors with attribution. Many firms remain underprepared, especially regarding readiness for OT/IT convergence, supply chain risk, and securing IoT devices.

To build resilience, organisations will need to invest in asset visibility, network segmentation, backup & recovery, incident response planning, and proactive security controls such as MFA and secure firmware. This prepares manufacturers to mitigate operational disruption, safeguard IP, maintain regulatory compliance, and protect reputation. This article explores: what these threats are, how they manifest, what the risk profile looks like, and how manufacturing businesses can move from reactive to resilient. If you’re in operations, plant management, IT/OT, or the C-suite, this article will help clarify what you need to watch for, what you can do now, and how to build a cyber resilient roadmap.

Questions This Article Answers

1. What major types of cyber risks are manufacturers facing in 2025 and beyond?
2. How frequently are manufacturing firms being targeted, and by whom?
3. What are the real financial, operational, and reputational costs of breaches in manufacturing?
4. Which parts of manufacturing operations are especially vulnerable (OT, supply chain, smart factories, etc.)?
5. What steps can manufacturers take now to improve cyber resilience and reduce exposure?

The Escalating Threat Landscape in Manufacturing

Manufacturing is now one of the most targeted sectors globally for cyberattacks. According to the Bitsight TRACE 2025 State of the Underground report, manufacturers accounted for 22% of the 4,853 cyberattacks during which attribution was possible, more than any other sector (Bitsight). That percentage has been climbing steadily as industrial operations become more digitally interconnected.

One driver is the convergence of operational technology (OT) with information technology (IT). As factories embed more sensors, robotics, Internet of Things (IoT), and remote monitoring, legacy OT systems, often built without hardened cybersecurity, become points of entry. Attackers exploit weaker protocols, unpatched firmware, insecure remote access, or vendor misconfigurations.

Another driver is ransomware and financially motivated threat actors. The Dragos quarterly report showed that in Q2 2025, manufacturing experienced the most ransomware incidents among industrial sectors globally. cybersecuritydive.com Threat actors are becoming more sophisticated, staying “dwell time” in compromised environments longer, stealing data first, or moving laterally before triggering an operational shutdown to extract better ransom demands.

Finally, geopolitical and state-sponsored espionage has elevated risk. Supply chains stretch across borders; many manufacturers serve both commercial and defence or strategic industries. As a result, they become targets not just for profit but for intelligence, IP theft, and infrastructure damage. Research from Forescout shows a 71% increase in threat actors targeting manufacturing between 2024 and early 2025. Industrial Cyber

Key Takeaways

• Manufacturing is currently the most targeted sector in many cyberattack attribution studies.
• OT/IT convergence introduces large vulnerability surfaces.
• Ransomware, espionage, and threat actor dwell time are increasing pressures.
• Threat volume is growing rapidly, including more sophisticated actors.

Facts & Figures

Why Manufacturing is an Attractive Target

Manufacturing has become one of the most appealing industries for cybercriminals and state-sponsored threat actors because of its scale, complexity, and essential role in global stability. Unlike many sectors, the consequences of a cyberattack in manufacturing are not limited to data loss or financial penalties. Disruptions can halt production lines, delay shipments, jeopardize safety, and erode public trust in supply chains that societies depend on. This combination of operational urgency and systemic impact makes the sector a bullseye for adversaries looking for leverage.

High Operational Dependence

Manufacturing thrives on continuity. Every hour of downtime on a production line equates to millions in lost revenue, contractual penalties, and customer dissatisfaction. According to a PwC survey, 61% of manufacturers identified operational disruption as the most damaging consequence of cyber incidents (pwc.com). Attackers understand this urgency and often time ransomware attacks to coincide with peak production or delivery cycles, increasing the likelihood that companies will pay to restore operations quickly.

Complex Supply Chains

Today’s manufacturing ecosystem is vast, often involving thousands of interconnected suppliers across multiple continents. Each vendor represents a potential access point for attackers. Supply chain attacks rose more than 50% in 2025, according to ENISA’s Threat Landscape Report (enisa.europa.eu). By compromising a smaller, less secure partner, adversaries can infiltrate major manufacturers undetected, escalating impact from the ground up. This “weakest link” problem is amplified as manufacturers increasingly digitize procurement, logistics, and inventory systems.

Legacy OT Systems

Operational Technology (OT) environments, such as SCADA systems and programmable logic controllers (PLCs), were often designed decades ago with uptime, not cybersecurity, in mind. Many still run on unsupported operating systems or proprietary protocols with limited authentication. According to CISA, unpatched vulnerabilities in legacy OT remain a critical risk to industrial operations (cisa.gov). Because these systems are essential for plant operations, patching them can be difficult, leaving them exposed to exploitation. When connected to modern IT or IoT networks, they become gateways for attackers to pivot into critical processes.

Valuable Intellectual Property

Beyond operational disruption, manufacturing firms are prime targets for intellectual property (IP) theft. Proprietary designs, chemical formulas, blueprints, and advanced production techniques can be worth billions on the black market—or to rival states seeking competitive advantage. A National Counterintelligence and Security Center report warns that foreign intelligence services increasingly target advanced manufacturing IP to accelerate their own industrial capabilities (dni.gov). Once stolen, IP cannot be reclaimed, and the long-term damage to competitiveness can far outweigh the immediate costs of an attack.

Key Takeaways

• Manufacturing’s reliance on continuous production makes downtime a lucrative pressure point for attackers.
• Complex supply chains expand the attack surface, with weak vendor security often exploited.
• Legacy OT systems lack modern security features and are difficult to patch, creating persistent vulnerabilities.
• Intellectual property theft is a high-value target, with long-term strategic consequences beyond immediate disruption.

Facts & Figures

When Attacks Succeed: The Far-Reaching Consequences

Cyber incidents in manufacturing rarely stay contained to IT systems; they ripple outward into supply chains, national infrastructure, and even public safety. Unlike other sectors, disruption here can literally leave shelves empty, medicines delayed, planes grounded, or global tech supply chains frozen. That’s why the stakes extend far beyond revenue they touch lives, economies, and trust at scale.

Food & Beverage Production

In food and beverage, even a short disruption can paralyze supply chains that rely on just-in-time distribution. A ransomware attack on a major U.S. meat processor in 2021 led to the temporary shutdown of plants and raised concerns about shortages in supermarkets (bbc.com). Extrapolate that to today’s globally interconnected systems, and a successful cyberattack could cause widespread shortages, increase prices, and strain logistics networks already vulnerable to disruption.

Pharmaceuticals

The pharmaceutical sector faces unique risks where downtime doesn’t just delay production but can jeopardize patient health. A cyberattack on Fresenius, Europe’s largest private hospital operator, disrupted medical supply chains during the COVID-19 pandemic (reuters.com). More recent threat intelligence suggests attackers are now actively targeting vaccine production and drug formula IP, creating risks of intellectual property theft alongside operational delays. For pharmaceuticals, the line between cyber disruption and public health crisis is thin.

Aerospace & Automotive

In aerospace and automotive manufacturing, precision engineering and just-in-time supply are critical. A breach that compromises design data or engineering files can lead to counterfeit or substandard parts entering global supply chains. This not only undermines safety but also risks national infrastructure projects that rely on timely delivery of reliable components. In 2023, Toyota faced production halts due to a supplier cyber incident, underscoring how a single disruption can cascade across entire industries (nytimes.com).

Electronics & Semiconductors

Few sectors illustrate systemic vulnerability like electronics. Semiconductor manufacturers are foundational to modern economies, from cars to smartphones to defence systems. When chipmaker TSMC reported a data breach linked to a supplier in 2023, global markets reacted sharply (bloomberg.com). A single disruption in semiconductor production can ripple across industries worldwide, delaying product launches, inflating costs, and stalling innovation.

Key Takeaways

• Manufacturing is critical infrastructure, making it an irresistible target for both cybercriminals and nation-state actors.
• Consequences extend far beyond financial loss—touching public safety, national security, and consumer trust.
• Food, pharma, automotive, and electronics are high-stakes sectors where even a brief cyber disruption can cascade into systemic crises.

Facts & Figures

Recent Examples of Cyberattacks in Manufacturing

While manufacturing has always been a high-value target, the last 18 months have shown just how disruptive attacks can be. Across industries and continents, attackers are escalating in boldness and impact. halting production, breaching data, and forcing companies into costly recovery efforts.

Jaguar Land Rover (UK, September 2025)

In September 2025, Jaguar Land Rover (JLR) faced a major cyberattack that forced shutdowns across multiple UK plants, including Solihull, Halewood, and Wolverhampton. The attack was claimed by groups linked to Scattered Spider and Hellcat, who leaked internal screenshots via Telegram to prove access. According to The Guardian, while JLR’s rapid shutdown of IT systems may have prevented deeper exfiltration of data, the production halt was a stark reminder that cyberattacks on manufacturers have immediate, tangible costs (theguardian.com). Experts estimate recovery could take weeks, underscoring the fragility of industrial continuity when digital systems are compromised.

Smiths Group and IMI (2025)

Earlier in 2025, engineering giants Smiths Group and IMI reported unauthorized access to core systems. In both cases, operations had to be isolated while continuity plans were activated. While the attacks did not cause full shutdowns, they highlighted how even well-resourced industrial firms remain vulnerable. Reports indicated that lateral movement within networks was detected, suggesting attackers had the potential to escalate further if detection had been delayed. The incidents serve as a reminder that size and scale do not guarantee resilience. Every manufacturer is on notice.

Supply Chain Exploitation

Globally, attackers are shifting tactics toward supply chain infiltration. By targeting smaller, less-defended suppliers, they gain access to major manufacturers with fewer defences at the perimeter. According to ENISA, supply chain attacks rose 50% year-on-year in 2025 (enisa.europa.eu), and ransomware targeting industrial operations jumped 23.5%. For manufacturers that depend on thousands of vendors, these statistics show the urgency of addressing supplier security as part of the broader defence strategy.

Key Takeaways

• Real-world attacks are already disrupting global manufacturing operations.
• Recovery timelines can stretch into weeks, even with fast containment.
• Supply chain compromise is one of the fastest-growing attack vectors, often bypassing direct defences.

Facts & Figures

Why These Attacks Happen

The motivations and methods behind attacks on manufacturers reveal why the sector is under such relentless pressure. Each weakness in operations, technology, or human behaviour becomes an opportunity for adversaries.

Downtime is Devastating

Every hour of lost production translates directly to lost revenue, delayed shipments, and broken commitments to customers. Research from IBM shows the average cost of downtime in industrial sectors is among the highest of any industry, incentivizing manufacturers to pay ransoms quickly rather than endure prolonged outages (ibm.com).

Patchwork Technology

Most manufacturers operate a patchwork of legacy OT and newer IoT systems, creating wide attack surfaces. Old PLCs and SCADA systems may run unpatched operating systems, while new IoT sensors often ship with default credentials. This creates vulnerabilities that are difficult to manage at scale.

Weakest Link Supply Chains

As noted earlier, attackers often bypass direct defences by infiltrating suppliers or contractors with weaker security. Once inside, they move laterally to higher-value targets. This method is cost-effective for adversaries and devastating for manufacturers reliant on hundreds or thousands of vendors.

Human Error

Despite technological advances, over 90% of breaches begin with phishing or credential compromise (verizon.com). Employees in manufacturing often focused on safety and output can be less prepared for digital threats, making awareness training essential.

IP Theft and Espionage

For nation-state actors, manufacturing represents a rich trove of intellectual property: engineering designs, blueprints, and trade secrets. Stolen IP can accelerate competitor development cycles or undercut innovation in strategic industries. A report from the National Counterintelligence and Security Centre highlights advanced manufacturing IP as a primary espionage target (dni.gov).

Key Takeaways

• Attackers exploit downtime pressure to force ransom payments.
• Legacy OT and IoT convergence create systemic vulnerabilities.
• People and supply chains remain the weakest links in manufacturing defence.
• IP theft represents a long-term strategic risk, not just a short-term cost.

Facts & Figures

Vulnerable Domains in Manufacturing: OT, Supply Chains, and Smart Factories

Operational Technology (OT) and Industrial Control Systems (ICS)

OT environments traditionally were designed for safety, reliability, uptime and not cybersecurity. Many of the control systems running plants, robotics, and safety interlocks were never architected with strong authentication, encryption, or secure remote access in mind. As these OT systems connect to networks for analytics, remote maintenance, or monitoring, they become exposed. Malware like Triton (which targeted safety systems) is a known example of how attackers can aim beyond data theft into physical danger. Wikipedia

Vulnerabilities in patching (OT often runs older, embedded systems), weak network segmentation, and lack of real-time monitoring (visibility) allow attackers to persist inside environments. The result: potential for operational shutdown, safety incidents, environmental damage, or even bodily harm in extreme cases.

Supply Chain Risks & Hardware/Software Trojans

Manufacturers have extended, global, multi-tiered supply chains. Software components, firmware, hardware, and even raw materials are often sourced from regions with uneven security standards. This opens attackers to multiple vectors: malicious code or malware in firmware, compromised supplier networks, or third-party vendor negligence. A survey of digital manufacturing found that hardware & software Trojans (i.e., malicious modifications) pose serious risk, capable of triggering poor quality or safety failures in products long after production. arXiv

Software supply chain attacks (where one vendor’s product/service is compromised, affecting many downstream users) are among the hardest to defend because of interdependencies. And many manufacturers lack rigorous vetting or monitoring of vendor security, version control, or verifying integrity of components.

Smart Factories, IoT, and Digital Twins

“Smart factory” initiatives promise efficiency gains, predictive maintenance, AI/ML analytics, digital twins, etc. But they also bring new risks. According to Deloitte / MAPI, almost half of manufacturers surveyed identified that operational risks (which include cybersecurity) are their biggest danger in their smart factory initiatives. Deloitte Digital twins (virtual models of factory operations) aggregate data from many sources; if data inputs are corrupted, manipulated, or stolen, the downstream impacts can ripple into decision-making and control. Research on “Security and Privacy of Digital Twins for Advanced Manufacturing” identifies multiple threat categories from data collection to machine learning, to system-level security. arXiv

Also, IoT devices are often less secured (default credentials, firmware unpatched, insecure communications). Attackers exploit them as entry points into more critical environments.

Key Takeaways

• OT & ICS remain high-risk due to legacy systems, weak access controls, limited patching, and potential physical consequences.
• Supply chain & embedded threats (hardware/software Trojans) can undermine trust and safety, often without immediate detection.
• Smart initiatives (IIoT, digital twins) multiplied touchpoints and attack surfaces; data integrity becomes as important as data confidentiality.

Facts & Figures

The Impacts and What’s at Stake

Operational Disruption

When cyber incidents hit manufacturing, they rarely stay confined to “IT issues.” Factory downtime, disrupted logistics, unfulfilled orders, delayed product launches all cascade. For example, steelmaker Nucor temporarily halted some production due to unauthorized access in its IT systems. Reuters Jaguar Land Rover recently faced global disruption after a cyber incident forced shutdowns across plants, affecting both manufacturing and retail operations. The Guardian

These operational costs often far exceed the direct costs of remediation. Loss of output, lost sales, penalties for failing to meet delivery contracts, overtime to catch up, etc., rapidly accumulate.

Financial, Reputational, and Regulatory Costs

Beyond lost output, there are direct financial costs: incident response, system rebuilds, forensic investigations, potential ransom payments. Then there are reputational damages: customers lose trust; suppliers may rethink partnerships; investors might view the company as a higher risk.

Regulations are tightening. In many jurisdictions, manufacturing firms handling certain data (employee, IP, customer, or industrial secrets) are subject to data breach notification laws, cybersecurity regulations (critical infrastructure standards), and sometimes government-mandated audits. Non-compliance can mean heavy fines.

Strategic and Innovation Risks

Cyber risk also undercuts innovation. Smart factory and IIoT initiatives may be delayed or under-adopted if cyber risk is not managed. R&D efforts, intellectual property (IP), trade secrets, or competitive designs are increasingly targeted. Theft of IP can erode competitive advantage, international standing, or even entire business models if core product designs are compromised.

Also, safety risk: safety systems, environmental controls, or regulatory monitoring systems being compromised can lead to actual physical harm, environmental liabilities, or even legal liability or class actions.

Key Takeaways

• The majority of cost from cyber incidents in manufacturing arises from downtime and operational disruption, not just IT remediation.
• Reputational harm and regulatory exposure are no longer “nice to manage” they are material to valuation.
• Innovation and IP are frontline assets; protecting them is as strategic as protecting machines.
• Safety and compliance aren’t just about rules, they’re about risk to life, environment, and long-term viability.

Facts & Figures

How Talion Tackles These Threats

Manufacturers cannot afford to rely on generic cybersecurity strategies. The unique nature of industrial operations, blending legacy OT systems with modern IT and IoT environments requires a tailored approach that balances uptime, safety, and resilience. At Talion, we’ve built our model around these realities, ensuring manufacturers are protected across the full lifecycle of risk: visibility, detection, containment, and recovery.

OT-Focused Managed Detection & Response (MDR)

Traditional SOCs often focus heavily on IT environments, leaving operational technology (OT) blind spots exposed. Talion provides 24/7 MDR across both IT and OT, delivering real-time monitoring of PLCs, SCADA systems, and industrial control environments that most MSSPs cannot see. According to Dragos, less than 30% of industrial firms have full visibility into their OT networks (dragos.com). Talion bridges that gap, ensuring threats are identified before they become operational crises.

Continuous OT Vulnerability Management

Legacy systems often can’t be patched without downtime. Talion’s vulnerability management program continuously scans OT environments to identify exploitable weaknesses, while recommending non-disruptive mitigations that maintain operational continuity. This approach reduces exposure without forcing manufacturers to choose between security and uptime.

Threat Containment & Network Segmentation

Once attackers breach IT systems, the danger is lateral movement into production networks. Talion helps design and enforce segmentation strategies that isolate OT from IT. Research from SANS ICS shows that poor network segmentation is one of the leading enablers of industrial cyber incidents (sans.org). By containing threats early, Talion ensures that even if an intrusion occurs, it cannot cascade into safety or production environments.

Incident Response & OT Remediation

Detection without response leaves organisations exposed. Talion supports hands-on remediation from safe shutdowns to emergency containment to structured restarts of OT systems. This is critical in manufacturing, where every second of downtime matters. According to IBM’s Cost of a Data Breach Report, companies with dedicated incident response capabilities save an average of $1.5 million per incident compared to those without (ibm.com).

Supply Chain Oversight

Manufacturers face elevated supply chain risks, with 50% growth in attacks year-on-year (enisa.europa.eu). Talion monitors vendor ecosystems, assesses contractor exposure, and enforces continuous oversight of third-party access. By extending visibility beyond the plant walls, we reduce the chance of attackers exploiting “weakest link” suppliers.

Workforce Awareness & Training

Technology alone isn’t enough. With over 90% of breaches starting with human error or phishing (verizon.com), workforce awareness is non-negotiable. Talion delivers OT-specific training, phishing simulations, and response exercises to ensure staff are prepared for modern threats whether in the control room, engineering department, or supply chain office.

Key Takeaways

• Talion specializes in OT environments where traditional MSSPs often fail.
• Services span the full lifecycle: visibility, detection, containment, and remediation.
• Continuous monitoring, supply chain oversight, and workforce training create resilience across complex manufacturing ecosystems.

Facts & Figures

What Manufacturers Can Do Now: How to Move from Reactive to Resilient

Building Visibility, Segmentation, and Monitoring

One of the first steps is improving visibility: know what OT and IT assets you have, their versions, how they’re connected. Network mapping, asset inventories, vulnerability scanning are foundational. Segment OT from IT networks, apply strict access controls, and enforce least privilege, especially for remote access and vendor access.

Implement real-time (or near real-time) monitoring, logging, and anomaly detection. The faster you detect a breach or unauthorized activity, the less damage the breach can do.

Strengthening Supply Chain and Vendor Risk Management

Manufacturers must enforce vendor security standards: perform due diligence, require security certifications, audit suppliers, and monitor downstream supply chain health. Embed requirements for firmware/software transparency, version control, integrity verification. Use trusted suppliers; consider contract clauses for cyber risk, incident response.

Also plan for “what if” scenarios: what happens if a supplier is compromised? Build redundancy or ability to switch suppliers; ensure back-ups of design and process materials are stored securely.

Investing in Resilience: Backups, Incident Response, and Proactive Security

Backups are only useful if they’re tested, isolated, and recoverable. Incident response planning (IRP) is essential: know who in your organisation does what, external partners (cyber insurers, forensics firms), communication plans (customers, regulators), and legal counsel. Regularly run tabletop exercises.

Proactive security measures: patch management (including OT/firmware), secure configuration, multifactor authentication (MFA), least privilege, encryption where possible, network segmentation, zero-trust principles, threat intelligence. For smart factories and IIoT, ensure that “connected devices” are tested and secured before deployment.

Also consider cyber insurance, but do not rely on it as a substitute for strong internal controls. It can help with recovery cost but doesn’t prevent initial damage.

Key Takeaways

• Visibility + segmentation = essential foundations. You cannot protect what you don’t know you have.
• Vendor/supply chain risk is not optional: it’s integral to effective cyber strategy.
• Incident response planning + recovery (backups, communication, legal) differentiate companies that survive vs. those that suffer permanent damage.
• Proactivity (patching, secure configuration, MFA, etc.) lowers risk significantly but requires investment and culture shift.

Facts & Figures

Final Thoughts

Building Cyber Resilience in the Manufacturing Industry

Manufacturing is more than just an industry, it is the backbone of economies, supply chains, and everyday life. From the food we eat to the medicines we rely on, from the cars we drive to the electronics that connect us, manufacturing touches every corner of society. That is precisely why attackers target it: disruption here multiplies far beyond balance sheets into public safety, national security, and global stability.

The reality is sobering. Cyberattacks against manufacturers are rising faster than in any other sector. Real-world incidents from Jaguar Land Rover’s production shutdowns to pharmaceutical breaches and semiconductor supply chain compromises show that this is not a hypothetical problem, but a lived reality. And the risks aren’t going away; they’re accelerating as operational technology, smart factories, and global vendor ecosystems expand.

But the story doesn’t end with risk. The manufacturing sector also has an opportunity: to treat cybersecurity with the same seriousness as safety, quality, and reliability. By embedding cyber resilience into operations, manufacturers can not only defend against today’s attacks but also unlock the trust, efficiency, and innovation needed to thrive in the digital era.

At Talion, we believe resilience comes from partnership. Manufacturers don’t need another black-box provider, they need a partner who understands OT, who shares visibility, and who stands shoulder-to-shoulder when incidents happen. Cyber risk in manufacturing isn’t just an IT problem; it’s a shared business challenge. And with the right strategy, preparation, and collaboration, it’s one the industry can absolutely overcome.

The choice for manufacturing leaders today is clear: wait for disruption and hope recovery is possible or invest now in building the resilience that ensures factories keep running, supply chains keep moving, and society keeps trusting the products they depend on. At Talion, we stand ready to build that resilience with you.

About the Author

Keven Knight is the Chief Executive Officer and Co-Founder of Talion Cyber Security. He leads Talion’s evolution from a defence-grade heritage into a modern cybersecurity partner built around governance, accountability, and resilience in high-pressure environments.

Before founding Talion, Keven led and grew BAE Systems Applied Intelligence Enterprise MSSP business, operating across some of the most demanding regulated and operationally complex sectors. His career also includes senior leadership roles at IBM, ICI, and AT&T, where he developed the operational discipline and governance mindset that continue to shape Talion’s approach today.

Keven’s work sits at the intersection of leadership decision-making, cyber risk, and governance. He is known for surfacing the structural conditions that determine whether security holds under pressure, and for challenging the industry’s reliance on activity-based models that fail to deliver clarity when it matters most.

Under his leadership, Talion has developed a governance-aligned, hybrid and Agentic SOC model that integrates human oversight with automation to support accountable, real-time decision-making. This approach has contributed to increasing industry recognition of outcome-driven cybersecurity, including Talion being named SME Security Solution Award winner, reflecting the growing importance of resilience-led security models in the mid-market.